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FOREWORD 


This investigation was conducted for the NASA Marshall Space Flight 
Center by the Convair Aerospace Division of the General Dynamics 
Corporation under Contract NAS 8-27048. 

The NASA technical monitor was Mr. John Key (S&E-ASTN-AAS). 

Mr. J. E. Jensen was the Principal Investigator for General Dy- 
namics /Convair Aerospace, assisted by Mr. P. J. Wilson and Mr. 

N. E. Strandlund of the Space Structural Analysis Group, Mr. T. C. 
Johnson of the Economics Analysis Group, Mr. H. B. Sturtevant of 
the Reliability and Safety Analysis Group, and Mr. C. J. Kropp of the 
Materials Research Group. 

The investigation was conducted from April 1971 to June 1972. 
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SUMMARY 


A study was made of the factors governing the structural design of the fully re- 
usable Space Shuttle booster to establish a rational approach to select optimum 
structural factors of safety. The study included trade studies of structural 
factors of safety versus booster service life, weight, cost, and reliability. Simi- 
lar trade studies can be made on other vehicles using the procedures developed. 

The major structural components of a selected baseline booster were studied in 
depth, each being examined to determine the fatigue life, safe-life, and fail- 
safe capabilities of the baseline design. “ ' 


Each component was further exa m ined 


m yy a.& tut UliCi CActnilllt 

to determine its reliability and safety requirements, and the change of struck 
tural weight with factors of safety. The apparent factors of safety resulting from 
a igue, safe-life, proof test, and fail-safe requirements were identified. The 
feasibility of reduced factors of safety for design loads such as engine thriist, 
which are well defined, was examined. 


It was found that: 


a. 


b. 


c. 


d. 


e. 


f. 


Fatigue is not a critical design criterion for the baseline B-9U due to its" 
short design service life. 

All baseline B-9U components except the wing have safe-lives In excess of 
the 100 mission design life. 

The baseline propellant tanks are not fail-safe, and attempts to provide frac- 
ture arrest capability result in prohibitive weight increase. The baseline 
wing and thrust structure require beef-up to attain a fail-safe capa- 
bility of 100% of limit load. P 

All baseline components except the aft orbiter support frame have struc- 

tU 7n r ^ a ? lhty WeU in eXC6SS ° f ** re( * uired 0-9999 for ultimate strength 
and 0.999 for yield strength. The support frame, with a yield reliability 
of 0.998, just barely falls short of the requirement. Z 

Of the four design approaches for which factors of safety were studi ed, the 
only approach that produces a cost and weight decrease is the one for which 
fail-safe design is applied to components that lend themselves to this de- 
sigpi p i osophy and safe- life to the remaining components. This approach 
and its associated criteria are selected as the optimum design approach. 

For pressure-designed structure it was found that large apparent factors 
of safety resulted from proof test and fail-safe considerations for tension ' 
structure. Conversely, it was found that reduced factors of safety are 

GaS . le ° n hlghly redund ant structural systems (i.e. thrust structure and 
wing) using a fail-safe design approach. 
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Weight and cost decreases for the optimum approach are approximately 1%. 

The factor o! safety selection procedure is found to be highly sensitive to 
to fracture mechanics calculations. 

The data used in the study for fracture mechanics analysis was found to be 
highly conservative as a result of an experimental test program, w ic was 
conducted for two candidate materials. On the basis of the experimental 
data, the safe -lives of the components should be much larger than those 

calculated. 
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1.1 DISCUSSION 


SECTION 1 
INTRODUCTION 


Structural factors of safety for aerospace systems have traditionally been established 
on a deterministic basis, relying on experience and engineering judgment. Parameters 
considered in establishing factors of safety have included 1) confidence in determining 
critical loads, 2) mission, 3) design service life, 4) redundancy, 5) replacement/repair 
philosophy, 6) development status of the selected materials, 7) confidence in analysis 
methods, and 8) the scope of the structural development and qualification test program 
Typical ultimate factors of safety of 1.5 for aircraft and 1.3 for unmanned space launch 
vehicles have provided generally satisfactory structures on past systems. 

The Space Shuttle system represents a major advance in structural technology. It em- 
bodies the characteristics of aircraft, spacecraft, and launch vehicles and their associ- 
ated severe environments and loads, long mission life, high reliability requirement, 
and considerations for low cost and weight. Conventional aircraft factors of safety 
could result in excessive structural weight, cost, reliability, and service life. Con- 
versely, use of low launch vehicle factors of safety could result in an unreliable struc- 
ture with inadequate service life. For the Space Shuttle it will become necessary to 
carefully select structural design criteria (i. e. , factors of safety, service life factors, 
etc. ) on a rational basis that account for the previously mentioned considerations, yet 
are optimum with respect to mission requirements, performance, service life, cost, 
reliability, and safety , and that will lead to the most effective Space Shuttle system. 

New requirements (Reference 19) for "fracture control" to prevent catastrophic service 
failures of propellant tanks, crew cabins, and other primary structural components 
necessitate consideration of fracture mechanics analysis, fail-safe and safe-life de- 
sign practices, and the additional factors of reduced design stresses and proof testing. 
Preliminary fracture control studies serve notice that large "apparent factors of 
safety" may result from this requirement. 

1.2 MAIN STRUCTURAL SAFETY VARIABLES 

1 * 2 * 1 DESIGN LOADS. The Space Shuttle booster will experience a large number of 
applications of a wide variety of loads during its service life. Considering any one 
particular loading (e.g. , loads arising from lateral gusts or winds during ascent, or 
loads arising from booster entry after staging) it is apparent that the vehicle is sub- 
jected to a large number of small- magnitude loads, a small number of high-magnitude 
loads, and, between, a decreasing number of loads of increasing magnitude. 
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Loads selected to design the structure are usually based upon a statistical “ £ 

the mission, aerodynamic, control, and aero-structural parameters that influence the 
load magnitude. These loads are then expressed deterministically for use ‘"^Mgmng 
the structure. Table 1-1 presents examples of parameters that are examined and van 
in selecting design loads for the Space Shuttle booster entry condition. 


Table 1-1. Booster Entry Condition Load Parameters 


Type of Parameter Parameter 


Effect when Varied 


Mission 


Aerodynamic 


Control 


Aero-Structural 


Staging velocity 
Staging altitude 

Life coefficient (Cl) 
Drag coefficient (0 d) 

Autopilot accuracy 
and redundancy 
Control system response 

Aeroelastic 
Stiffness 
Buffet response 


Establishes boundary of a design 
I entry corridor with variable 
velocities, accelerations, and 
transition altitudes 


Results in load redistribution 
or magnification 


The usual procedure is to vary the parameters from the nominal values in a rational 
manner and produce a load probability density distribution, as illustratedm ^e ~ ’ 
The design load is then selected as that load that has the probability density of appoxi- 
mately 1/1000 (i. e. , one chance in 1000 of occurring). Ex P ressed in ^ 

the design load is the mean load plus three times the standard deviation ( X>- 

approach is "the use of probabilistic methods to arrive at deterministic loads. 

Determining design loads on this basis was beyond the scope of 

Phase B Space Shuttle and/or loads that resulted from References 22 throug 

be used to provide design load information for this study. 



Figure 1-1. Load Probability Density Distribution 
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2 * 2 STRUCTU RAL STRENGTH. An effort is made to restrict the variation of 
strength between apparently identical structures by controlling the manufacturing of 
the materials employed and the fabrication of the structure. Materials are controlled 
by adherence to strict limits in the chemical composition and in the manufacturing 
methods (heat treatment, rolling, etc. ). For most metallic materials, this control 
alone minimizes variation among various samples of materials to the same specifica- 
tion. In certain cases, where it is less easy to control the manufacturing process 
(e. g. , in casting) the results are more scattered. Inspection controls are super- 
imposed on these controls. By visual examination, radiographic examination, and 
strength tests of specimens, it is possible to maintain a check on variations by re- 
jecting batches that include bad samples. 

The same general remarks apply to assembled structures. Strict control of dimen- 
sional tolerances and workshop practices (e. g. , riveting, welding) is practiced. 

Visual inspection or, in certain cases, strength checks of sample pieces of construc- 
tion minimize variation. However, in spite of this rigid control some variation in 
strength between apparently identical structures still results. 

When plotted, these results appear as shown in Figure 1-2. As might be expected, 
the majority of specimens have strength values at or near the average, and the num- 
ber of specimens having strength less or greater than average becomes less as the 
deviation from the average increases. Though the variation of the strength of the 
structure arises from a large number of individual causes, the resulting scatter 
generally produces a smooth curve. There are, however, two points to note. The 
ratio of the width of the diagram to the mean strength differs for different materials 
and forms of construction, corresponding to the degree of scatter. Materials or 
structures subject to wide scatter are represented by a broad curve shape. Second, 
in some cases, the diagram is not symmetrical about the vertical axis; for example, 
the inspection methods applied may prevent very low strengths from being included, 
but may accept very high strengths. 
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Material design allowables are ,,°5^ 

"r " n n 1000 ht toechance o, having this low strength, Tests of 
ruet ^o^r to establish eotnponent design allowable strengths on ^s tasis 
„ally not done because of the large costs required to W-tcate and tes a ar^e 
nuUer of complex test components. To gain confidence in the strength of structural 
components ° additional factors, conservative analytical methods, and development 
tests should be considered. 

Determining component and material design allowable strengths was beyond ^ =c°pe 
of "dy. Easting material and component strength data has been used to deter- 
mine the variation of strength of the candidate Space Shuttle materials. 

. „ o F , rT A« nr SAFETY AND RELIABILITY. Most current aerospace vehicles 

iTl Z1.T2! Lid to allow for unknowns in internal stress distribution and uncer- 
tainties in strength analysis methods. 

ThP factor of safety concept is illustrated in Figure 1-3, where the probability density 

If Lld diLribuUon of Figure 1-1 and the probability density of structural strength of 



LOADS. STRENGTH (KSl) 

Figure 1-3. Factor of Safety Concept 
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stamgtti curve is a measure of the probability of a structure's failing and can be re- 
la ^ d , f ructural reliability, as discussed in Section 7. It can be seen that the prob- 
ability of structural failure can be reduced and the structural reliability increased with 
the use of larger factors of safety. 

hi practice ’this factor is applied to the maximum anticipated loads or combinations 
of loads (defined as design limit loads) that the vehicle is expected to experience 
(Figure 1-1). The formal definition of limit load is "the maximum anticipated load, 
or combination of loads, that a structure may be expected to experience during the 
performance of missions. " At limit load, the structure is required to have sufficient 
s rength to withstand the limit loads with other accompanying environmental phenomena 
without excessive elastic or plastic deformation. 


Uitimate load is the product of limit load and the ultimate factor of safety. At ultimate 
oa , the st ^cture is designed to withstand simultaneously the ultimate loads and other 
environmental phenomena without failure but with no limit on yielding or deformation. 
No factor of safety is applied to any environmental phenomena except loads. 

An additional load is often defined and denoted as yield load. Yield load is defined as 
tiie product of limit load and the yield factor of safety. The rationale and usage of 
t is factor and load condition are to provide a small margin of safety against exces- 
sive yielding and deformation at limit load conditions. 

Burst and proof loads and factors of safety are specified for such pressure-carrying 
structures as pressure vessels and cabins. Burst or proof factors are applied to these 
tanks to provide extra engineering checks because of the high hoop stresses to which 
these structures are subjected. Of these, the burst pressure Is the pressure that a 
est article must sustain at a singular loading without rupture. Burst tests are usually 
limited to one or two test specimens In the case of large tanks and a statistical sampl- 
ing of production units in the case of smaller bottles. 

Proof pressure Is a pressure applied to each vessel In a production run as a test to 
demonstrate adequate workmanship, material quality, and service life. Requirements 
or proofing and the derivation of proof factors are discussed In detail in Section 5. 

Different values of factors of safety are used for aerospace vehicles to reflect the 
designers’ varying confidence In different structures, or Increased conservatism 

n- T, e I eUole 18 maimed ' In addltiotl ’ different factors are used for flight or non- 
■ c ° ndltlons - A tyP 1031 set of these factors Is presented in Table 1-2. Of interest 
is that factors In the major structure are divided into two categories pertaining to 
pressure-loaded and nonpressure-loaded structures. 

The effects of temperature must be considered in the vehicle design. Heat sources 
are aerodynamic heating using critical trajectories, engine gas radiation, and internal 
heat and cold sources. The effect of these fluxes will be different on different sections 
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Table 1-2. Typical Factors of Safety for Aerospace 
Vehicle Primary Structures 


Type of Vehicle 
Aircraft 


Factor of Safety 

Type of Structure Limit Yield Ultimate Bursty 


General structure 
Pressure cabins 


1.0 1. 0 to 1. 2 


Unmanned Launch General structure critical 1. 0 
Vehicle for flight loads 

General structure designed 1. 0 
by nonflight loads and dan- 
gerous to ground personnel 

Propellant tanks 1* 0 


Manned Launch 
Vehicle 


General structure critical L 0 
for flight loads 

General structure designed 1. 0 
by nonflight loads and dan- 
gerous to ground personnel 

Propellant tanks 0 


of the vehicle. Hence, it is necessary to generate time-temperature histories for all 
pertinent vehicle structures. These temperatures are used unfactored during ana y 
at both limit and ultimate conditions. 

Mata integral propellant tanks normally fall into the class of pressure-relieved struc- 
tos meaning thTt axial and bending loads on the tank walls are relieved by the tank 

taternalpressure. In calculating design loads, this relief Is used unfactored with fac- 

tored airloads. 

1 o. 4 BRITTLE FRACTURE. Pressure vessels are stressed to very hl J h l ® v ®^ 
use welding to save weight or prevent leakage. Discontinuity stresses, s q{ 

fects, and initial flaws always exist and are difficult to control or pre ic 
variations and limitations of manufacturing and inspection Presses. As 
any poor workmanship or material can cause premature tank failu . 

-tr sr pr rr 

of environment and service loading, these flaws may grow to catastrophic proport , 


resulting in serious reduction of service life or complete loss of the vehicle. Final 
fracture is often sudden, unexpected, and totally devoid of gross plastic deformation 
or yielding. It is important to note here that this "brittle like" behavior (crack in- 
stability) while perhaps most spectacular in so-called "high-strength" alloys, does 
occur to some degree in most aerospace structural materials. 

Recent cases of catastrophic failure in primary structure have emphasized the need 
for a fresh look at the structural integrity process currently used to design and qualify 
structural systems. Perhaps the most obvious deviation that becomes apparent is the 
need to consider the existence of flaws in "new" structures and to account for their 
presence during the criteria development, design analysis, and test phases. 

Fortunately, linear elastic fracture mechanics analysis and testing techniques have 
reached the state of development where they can be used with some level of confidence 
to assess the degree of flaw criticality, to predict the extent of subcritical growth 
before catastrophic fracture, and to determine the resultant failure modes. 

Much of the basic ground work for the current application of linear fracture mechanics 
to real structures can be attributed to the investigators associated with the examina- 
tion and solution of tankage and pressure vessel failures in recent years. Application 
to other structural components, on the other hand, while numerous, have been almost 
entirely motivated by independent requirements and desires within the particular air- 
frame company to ensure adequate fracture control. 


Specific criteria, guidelines, and requirements to consider fracture mechanics in the 
design and procurement cycle for the Space Shuttle are presented in References 10, 19, 
and 26. The role of the fracture mechanics discipline in pressure vessel design and 
proof test qualification is rather straightforward (Reference 19); however, its impact 
upon weight and performance, and its relationships to factors of safety are more com- 
plex. For long-life pressure vessels that require large proof factors, lower design 
stresses, and higher weights than those required for the specified factors of safety may 
exist and result in large apparent factors of safety that should be considered when 
selecting and trading off structural design criteria. 

The role of the discipline in designing and qualifying other nonpressure -carrying struc- 
tural components is less obvious. The approach to be taken in this program is to as- 
sume initial flaws and to select design stress levels that do not allow the flaw to grow 
to critical size during the design life of the vehicle. Again, large apparent factors of 
safety may exist and are determined. 

® PROOF FACTORS AND TEST METHODS . An approach using the principles of 
fracture mechanics has been developed recently by Tiffany (References 14 and 19) and 
can be used as a design tool for safe-life design of pressure vessels. Tiff an y's ap- 
proach, sometimes called a fracture control program, consists of integrating residual 
crack strength analysis, flaw growth, and a structural proof test into a closed loop. 
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As a result of the proof test, the vessel is said to be crack proof, and 1 

failures are "eliminated’' at the operating stress levels over the design service life. 

Some limitations exist in such a program, and improper use can cause the component 

to be scrapped. 

The proof test consists of statically loading the structure to a level of stress S rea ^ r 
than the maximum level expected in service. In addition, the test should 'bs conduct 
at a temperature consistent with the lowest expected operating level. If completed 

successfully, this scheme provides assurance that all existing flaws or eec are 

ZrrScal size required for fracture. With the aid of linear eU.Be fracture 
mechanics, this critical level includes all flaws of equal stress intensity and thus a 

wide variety of shapes. 

The length of service life ensured by the 
proof test is the time required to grow the 
smaller "proof" stress flaw to the larger 
critical size associated with maximum 
service operating stress (Figure 1-4). 

It is important to note that the length of 
service time achieved by proof testing is 
applicable only to those flaws, defects, 
and cracks present at the time of test. 

No regard is given to flaws that may 
appear during service. Thus, the importance of separate fatigue test is fully realized 
since it is the only means available to detect design deficiencies that occur in service. 
Thus, for most applications, the single-cycle proof test concept cannot be extrapolated 
to cover the entire design or service lifetime of the aircraft. 

Like components on individual vehicles may have different toughness values ( ^ I cj * 
Thus, proof testing in production to equal values of stress will screen out smaUer 
flaws in the less tough material. Life after proofing, however, is indepen i c 

and depedent only on Ki./K Ic (Figure 5-9). This is true so long as relatively short 
periods are considered and loading is fairly uniform. Catastrop ic ai u crack 
component will occur when the critical value of K is achieved; ^us , for equal cr^k 
lengths the less tough component will fail first. It is not unreasona P 

that in aerospace applications, unequal flaws, screened out in the proof t . » 

lome time d^ing the service period be at the same length. This is due mainly to the 
wide variation in usage and environment Thus, the tougher component can rea is ic 
ally be expected to achieve a longer life under these conditions. 

The practical considerations of proof testing must be evaluated during the structural 
component design. Figure 2-19 shows the relationship of the proof tes P^sbu ^ 
envelope to the design and normal operating pressure envelopes for th Sp 

Shuttle booster liquid oxygen tank. The cryogenic proof test with liquid nitrogen wa 


Figure 1-4. Proof Test Concept 
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selected because it duplicated the tank operating temperature and provided a relatively 
safe proof test medium. It can be seen that the upper portion of the tank is overpres- 
surized during the proof test and must be designed to account for this proof test limit- 
ation. For the design pressure, this overdesign for the proof test condition results 
in an apparent factor of safety larger than the ultimate factor of safety specified. 

2 - 6 SAFE-LIFE AND FAIL-SAFE DESIGN PHILOSOPHY . All vehicles are designed 
for fatigue life in excess of the expected service life; however, the approach to pro- 
viding residual strength or residual life in structures in the event of induced or inherent 
damage can be provided by designing for fail-safe or safe-life. For example, in com- 
mercial transport aircraft where safety is of utmost concern, fail-safe capability is 
provided to the greatest possible extent. For military aircraft where performance is 
of primary concern, fail-safe capability is not provided where it would cost weight to 
do so, reliance being placed on the fatigue analysis and tests to screen out potential 
structural damage, and safe-life analysis of assumed defects is used to establish safe 
inspection intervals. For single-mission launch vehicles and spacecraft, reliance is 
placed on safe-life analysis of assumed defects and proof tests of each article to pro- 
vide safe -life in excess of the short service life. 

Fail-safe design requires that the failure of any single structural component will not 
degrade the strength or stiffness of the remainder of the structure to the extent that 
the vehicle cannot complete the mission at a specified percentage of limit loads. Fail- 
safe design is normally achieved by providing structural redundancy and the means for 
arresting unstable crack growth. On the other hand, safe-life design requires suffici- 
ently low design stresses that catastrophic failures of critical structural components 
will not occur during a specified service life due to initiation and growth of fatigue 
cracks, or due to the growth of flaws and defects that already exist in the structure. 

The safe-life of a structure is usually taken as an arbitrary multiple or increment of 
the specified service life depending on whether the concern is for the initiation of fatigue 
cracks or the growth of existing defects. For fatigue the arbitrary multiple is usually 
taken as four service lives, and for the growth of flaws or defects the increment is 
usually taken as the interval between major scheduled inspections. 


Some confusion exists in Reference 26, the aerospace industry, and NASA regarding a 
precise definition of safe-life. Some engineers, particularly aircraft designers con- 
cerned with long life structures, define safe-life as the life of a component to the initia- 
tion of fatigue cracks. Other engineers, particularly those with fracture mechanics 
training, define safe -life as the component life for initial defects in the component to 
grow to critical size and failure. A third group, including the authors, feel that safe- 
life encompasses both of these failure modes. For purposes of this report and to be 
consistent with the definitions of Reference 26, two definitions are adopted: 1) fatigue 
life is the life of an unflawed structural component to the initiation of visible fatigue 
cracks , and 2) safe-life is the life for initial defects in a component to grow to a critical 
size for catastrophic failure. 
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1.3 OBJECTIVES OF STUDY 

The present study was undertaken with the following objectives: 

a. To determine the required yield and ultimate factors of safety for selected Space 
Shuttle booster structural components. 

b. To determine the apparent factors of safety that exist due to other design consider- 
ations such as fatigue, safe-life, fail-safe, and proof testing. 

c To determine the variation of component structural weight when the factors of 

safely are varied for all or only individual design conditions (i. e. , factor of safety 
varied on thrust loads but held at specified value for other design conditions). 

d. To provide the capability of making structural criteria trade studies in terms o 
performance, cost, service life, reliability, and crew safety. 

1 . 4 STUDY APPROACH 

The study approach consisted of selecting a baseline Space Shuttle booster vehicle, 
^sslonT preliminary criteria, and cost m«U. and performing theoretical and e^err- 
menial studies using this vehicle and certain selected components as references t 
establish booster vehicle weight, cost, reliability, and safety sensitivities for vana ons 
in Structural design criteria (i.e. , factors of safety, design life scatter factors, etc.). 
Study results are then used to develop a procedure to identify the 

teria changes (i.e. , factors of safety, design service life, Me ^st She proce- 
bility factors, etc. ) on the total booster weight, performance, and cost. The proce 
dur es developed clearly show the relative criticality of the various design criteria 

Selected baseline vehicle. Similar investigations and criteria trade studies can 
be performed on other Space Shuttle vehicles by following the procedures and examples 

presented. 

Theoretical studies consisted of development of design loads, service ^load _ s P® ct ^ 
structural sizing, and performance of fatigue, safe-life, fail-safe, reliabi ty, 
cost analyses. Crew safety areas of risk were identified and evaluated qualitatively. 

Preliminary investigations showed that safe-life and pr °° fte st S p S r 0 of 

a large portion of the booster structure (i. e. , main propellant tanks a ng). 

test factors (and hence the design) are based on analytical predictions o e ra t 

p-rowth of crack-life flaws that exist or are assumed to exist in the structu . 
analysis consists of calculating flaw growth under cyclic and sustained loa 
and assumed atmospheric environmental conditions. Conditions of al ^ ra f g> 

heating, drying, and exposure to a salt-laden sea-coast atmosphere could produce 
significantly higher crack growth rates that, in turn, would produce lg er proo 
factors and structural weight, if accounted for. 


1-10 


Since these factors resulted in large apparent factors of safety and have a significant 
impact on the results of this study, a small experimental flaw growth test program was 
accomplished. Specific objectives of the experimental program were 1) to assess the 
effects of life cycle condition on crack growth rates, proof factors, factors of safety, 

and structural weight; and 2) to verify analytical predictions of flaw growth and proof 
factors. 

The study did not include the orbiter because of lack of detail knowledge and data on 
the orbiter (i. e. , Convair Aerospace Phase B studies have been limited to the Space 
Shuttle booster) and the low funded effort. It is believed by the authors that the study 
results are generally applicable to the orbiter; however, caution should be exercised 
and orbiter studies accomplished before this conclusion can be fully satisfied. 

The scope of the program also did not permit study of the entire booster structural 
system; however, the major structural components were studied. These included the 
crew cabin, main L0 2 and LH 2 propellant tanks, thrust structure, vertical tail box, 
aft orbiter support frame, and wing boxes, which represent approximately 45% of the 
booster primary structural weight, 25% of the booster dry weight, and 60% of the total 
booster structural system cost. Not included in the study were the thermal protection 
system, canards, intertank adapter, and other miscellaneous subcomponents. 
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SECTION 2 

BASELINE BOOSTER DEFINITION 


2.1 BOOSTER MISSION 


The Space Shuttle Program is designed to provide a space transportation system capable 
of placing and/or retrieving payloads in earih orbit. Hie specific mission considered 
in this study consists of launching an orbiter vehicle into a 100 n.mi. south polar orbit 
from WTR with a 40,000-pound payload. These objectives are achieved using a two- 
stage (booster and orbiter) vehicle capable of boost and earth entry with cruise -back 
to a designated landing site. This cycle is accomplished with reasonable acceleration 
levels and shirt-sleeve cabin environment. The significant elements of this mission 
are ground operations, mating of booster and orbiter, launch followed by staging of 
die two vehicles, wife the booster returning to the launch area and the orbiter continu- 
ing on to its prescribed orbit. A complete mission cycle is shown in Figure 2-1. 

A typical mission flight profile for the booster is shown in Figure 2-2. 

2.1.1 ASCEN T. The ascent phase is defined as beginning with engine ignition and 
ending with die initiation of separation. In the ignition/lift-off sequence, the thrust 
rises to 50 percent of full thrust and holds at that level until main-stage in all engines 
can be verified and holddown release is verified. Upon verification, the thrust is in- 
creased at a controlled rate to 100 percent. The vehicle lift-off occurs when the 
thrust-to -weight ratio (T/W) is greater than 1. 

After the vehicle has cleared the service towers, the vehicle is oriented to the correct 
azimuth and pitch to provide the proper trajectory such that the vehicle assumes a 
wing-level , pilot-side-up attitude and correct azimuth. As propellant is depleted, 
along with increased thrust at altitude, the vehicle acceleration increases to 3 g. At 
this point, the main engines are throttled to maintain 3 g for crew comfort and vehicle 
design loads. Ascent phase is terminated by initiation of separation based on attain- 
ment of desired velocity or by indication of fuel depletion. Figure 2-3 gives a variety 
of ascent trajectory parameters. 

^ SEPARATION. Near booster burnout, the booster engines are throttled to 50 
percent thrust. When both sets of engines are at 50 percent thrust, the restraint 
mechanism between orbiter and booster is released, booster thrust decays to zero, 
and the orbiter rotates upwards and aft, relative to the booster, on separation system 
linkages until the orbiter is free and accelerating under its own thrust. The control 
of all sequencing functions necessary for separation and maintaining control of both 
orbiter and booster is accomplished by software in the main computer. 
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Mission: 

Altitude: 

Velocity: 

Gamma: 

Heading Azimuth: 


The staging conditions for the 100 n. mi. south polar circular orbit mission from WTR 
are: 

South Polar Launch 
244,784 ft 
10, 824 fps 
5. 654 degrees 
182. 495 degrees 

The booster weight decreases trom 4. 188,000 pounds at ^ Zs 

at separation. After separation the orbiter continues on its mission an 
positions itself for entry, using ACPS engines. 

2 1 3 ENTRY The entry mode for the booster is a supersonic gradual transition. 
mgMiglnfle entry are shown in Figure 2-4. During the first 40 seconds alter 
staging the booster pitches to 60 degrees angle of attack and banks* .48 degrees. 

That attitude is maintained until the resultant load factor r * ac e ' ’ k 

at Mach 8. 4 and 144, 000 feet altitude. Pitch modulation starts at ^s t'me te k £ 
from exceeding 4. 0 g. The lower stability limit constrains the angle o 
going bekw^lltf degrees during this maneuver. Upon reaching 30 degrees, the 
ancle is raised to 75 degrees, which is held until the vehicle has completed its tor . 

A maximum q of 409 psf is reached at Mach 6. 3 and 110, 800 feet^ltito e. ^ 

3 25 the angle of attack has returned to 56 degrees. Beginning ther , g 

attack teT constertned by tee upper stability limit, reducing to 5 degrees at Mach - 1. 1- 
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ENTRY 
TERMINATION 
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STAGING 

ALTITUDE (H) 244,784 FT 

RELATIVE VELOCITY (V) 10,824 FPS 

REL. FLIGHT PATH ANGLE <Y) 5.034 DKG 

HEADING AZIMUTH (c r) 182.495 DEG 
WING LOADING (W/S) 91.29 PSF 

TIME (T) 216 SEC 

ANGLE OF ATTACK (a) 0 DEG 

BANK ANGLE (4) 0 DEG 

MACH NUMBER 11.9 
FLYBACK RANGE (R) 116 N.MI. 


H = 61,100 FT 
V - 1430 FPS 
T 490 SEC 
4> 75 DEG 

R - 428 N.MI. 


MINIMUM ANGLE 
OF ATTACK DURING 
PITCH MODULATION 
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LOWER STABILITY 
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v MAXIMUM Q 

H 113,800 FT 
V = 6950 FT 
T = 385 SEC 
4> = 48 DEG 
R 39G N.MI. 

Q 415 PSF 


6 7 

MACH NUMBER 


10 


Figure 2-4. Booster Entry Trajectory Key Events 


When the booster reaches 20, 000 feet, the flyback range is 404 n. mi. At the com- 
pletion of the entry phase the gross weight of the booster has decreased slightly to 
about 787,000 pounds. 


2. 1. 4 ABORT. The space shuttle provides safe mission termination capability. This 
capability includes rapid crew and passenger egress prior to liftoff and intact abort 
after liftoff. Intact abort implies the capability of the booster and orbiter to separate 
and continue flight to a safe landing. 

For flight test phases an ejection system is provided for the crew. The selected sys- 
tem was an open ejection seat using pressure and "g" suits. 

The approach to abort in the operational program is intact abort. Prelaunch or pad 
abort is concerned with aborts during the 45-minute time period from when the crew 
and passengers enter the vehicle until liftoff. The failures in this time period that can 
be cause for abort can be classed as noncritical or critical. Noncritical failures are 
those failures in which there is no danger of vehicle or crew loss. The abort proce- 
dure would be vehicle shutdown and egress through the tower. Critical functional fail- 
ures are those that present the danger of vehicle loss and personnel loss if they re- 
main with the vehicle. The selected abort mode for critical pad failures is rapid 
egress using dedicated semi-free-fall elevators in the launch tower that would descend 
to a safe area below the tower. 


Mated ascent refers to the time period from liftoff through staging. Noncritical fail- 
ures are those that by definition allow continued safe mated flight to booster propellant 
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depletion. After separation the booster performs a conventional entry and flyback. 
Critical failures are those failures in which continued mated flight to booster propel- 
lant depletion is not possible and early separation is required. After separation, re- 
covery procedures are initiated for both vehicles, providing the critical failure that 
caused the early separation does not prevent this. 

The entry phase for the booster is that time period from stage separation through en- 
gine deployment and start. As with orbital entry vehicles, such as Apollo or Mercury, 
there is little that can be done in the way of abort procedures during this phase. 

2 . 1 . 5 ATMOSPHERIC FLIGHT . At approximately 20,000 feet, the air-breathing 
engines are deployed and the return cruise is initiated. 

The vehicle descends to approximately 13,000 feet and is flown at the altitude that is 
for best cruise specific range (maximum n. mi. per pound of fuel) for the required fly- 
back range of 404 n. mi. Landing is based on a touchdown speed at the trimmed power- 
off Cl for an angle of attack of 14 degrees. The landing distance varies with the ve- 
hicle gross weight, but with a touchdown weight of 628,000 pounds, about 5625 feet are 
required for landing over a 50-foot obstacle. This distance is for a standard day con- 
dition at sea level using braking on a dry concrete runway, 

2. 1. 6 FERRY. The basic design of B-9U is evolved from satisfying reference mission 
requirements; no design penalties are incorporated to accomplish ferry missions. The 
takeoff capability of the booster is critical to the ferry mission requirements. Cruise 
performance for the ferry mission consists of flying against a 50-knot headwind to the 
point of no return with all engines operating, and then cruising to the destination against 
the 50-knot wind with one engine inoperative. Cruise altitudes are selected that mini- 
mize total mission fuel requirements. Fuel reserves are included in the total mission 
fuel requirements. 

2.2 BOOSTER STRUCTURAL CONFIGURATION 

The space shuttle baseline configuration selected for this study consists of the GDC 
B-9U booster and the NR 16 1C orbiter, as reported in References 1 and 2. The B-9U 
booster is a low, delta wing vehicle with a single vertical tail and a small canard sur- 
face mounted forward above the body centerline. The body is basically a cylinder with 
fairings added to streamline the intersections with the aerodynamic surfaces. Figure 
2-5 shows a general view of the booster, Figure 2-6 gives the three view, and the in- 
board profile is given in Figure 2-7. 

The baseline booster configuration consists of cylindrical tanks to contain the launch 
propellants and to serve as the structural backbone. Surrounding the basic body 
structure is an outer heat shield assembly that provides the protective layer against 
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Figure 2-5. B-9U Booster Vehicle Configuration 
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Figure 2-6. B-9U Booster Three View 
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Figure 2-7. B-9U Booster Inboard Profile 
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aerodynamic heating and an aerodynamic surface for the body. This aerodynamic sur- 
face varies from a round body section at the nose to a flat-bottomed section at the delta 
wing, which is attached to the underside of the body structure. The delta wing, with its 
elevons, canards, and the vertical tail, provides the aerodynamic surfaces required 
for stability and control for both supersonic and subsonic flight. 


For the vertical launch, mated with the orbiter, the booster thrust is provided by 12 
main propulsion engines, with a nominal thrust of 550,000 pounds per engine, that 
burn liquid hydrogen and oxygen and are arranged in the aft end of the vehicle . 

Control of the vehicle during powered ascent is provided by gimballing the main en- 
gines for thrust vector control and by using elevons for additional roll control. Sub- 
sonic cruise thrust for flyback after a space mission or for ferry flight is provided 
by 12 air-breathing engines mounted in nacelles. These engines are normally stowed 
within the wing and body structure envelope during the vertical flight and entry. 

Attitude control outside the earth's atmosphere is provided by the attitude control 
propulsion system (ACPS) engines installed on the fuselage and wings. The ACPS 
engines use LOg/LHg propellants and provide 2100 pounds thrust each. 

Landing is accomplished using a conventional tricycle landing gear, including two 4- 

wheel-bogie main landing gear assemblies and a dual-wheel steerable nose gear 
assembly. 

The booster incorporates a mating and separation system on its top surface to support 
the orbiter during vertical flight and to perform the separation of the two vehicles. 

Basic data for the booster are given in Table 2-1. 

Internally, the booster is arranged with the L0 2 tank forward and the LHo tank aft The 
selection of cylindrical tanks with separate, state-of-the-art bulkheads, and of cylindri- 
cal mtertank section and thrust barrel all combined into a primary load-carrying struc- 
ture, was made to maintain simplicity of the design and manufacture, to increase con- 
fidence, and to reduce development risk. The breakdown of the booster body main load- 
carrying structure is shown in Figure 2-8. 

The tanks have ellipsoidal bulkheads with radius -to-height ratios equal to /2 to mini- 
mize hoop compression effects. The tanks are of aluminum alloy, with longitudinal 
integral T-stringers. They provide the primary load-carrying structure of the booster 
as well as functioning as pressure vessels. The tank diameters are 33 feet. All struc- 
tural frames are external to the main tanks. The L0 2 tank is 667 inches long and is 
shown in Figure 2-7 and Figure 2-9. The L0 2 tank is not insulated. 

Four main L0 2 lines are routed through the lower body main structure/heat shield 
interspace, past the main landing gear and aft to the vehicle base. 
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Table 2-1. B-9U Basic Data 


Item 

Item 

Booster 

Launch weight, M lb 4 ** 8 

Empty weight, M lb 0,627 

Cruise weight, M lb 0,787 

Landing weight, M lb 0.639 

Orbite r we ight , M lb 0 • 85 9 

Landing c.g. station, in. 3,166 

Flyback range, n. mi, 404 

Staging velocity (relative), fps 10,824 

Staging altitude , ft 245 > 000 

Body 

Planform area , ft 2 8,728 

Volume , ft 2 274 > 650 

Tank diameters, in. 396 

Length, in. 3 > 067 

LH„ tank volume, ft 120,161 

LO a tank volume , ft 3 40 > 901 

Wing (Theoretical) 

Area, ft 2 8,451 

Span, in. 1,722 

Aspect ratio 2.436 

MAC (c), in. 860,6 

Wing station, in. 314.3 

1/4 c. in. 215.2 

1/4 c station, in. 3,421 

Wing (Exposed) 

Area, ft 2 5,047 

Span (semi), in. 645 

Aspect ratio 2.289 

MAC (c), in. 671 • 8 

Wing station, in. 456 

1/4 C, in. 1^7.9 

1/4 c station, in. 3,563 

Load landing, lb/ft 2 126 * 6 

Max cruise, Ib/ftr 155.9 

Location, c.g. to 1/4 <T» in. 397 

Canard pivot to 1/4 c, In, 1,539 

Wing 1/4 c to tail 1/4 c, in. 285 

Thickness ratio t/c 101 

Miscellaneous 

Canard area (exposed), ft 504 

Canard pivot to c. g. , in. 1,142 

Canard span, in. 80 °* 4 

Vertical tail area (exposed), ft 1,500 

Tail 1/4 c to c. g. , in. 682 

Tail span (exposed), in. 533. 8 

Gear axis to c.g. , in. 129 * 0 


The LH„ tank la similar in geometry to the LOg tank, except for the length of 1779 
inches, and is shown in Figure 2-7 and Figure 2-10. 

For the mixture ratio of 6:1, with added volume of 7.1 percent (for ullage, potential 
tanking at minimum specific impulse, and for internal insulation) a total LH 2 tank 
volume of 120,160 cubic feet results; for the L0 2 tank, which does not ave any m 
sulation, a factor of 4.5 percent is added to cover ullage and minimum specific m- 
pulse ter a tank volume Vf 40,900 cubic feet. The LH 2 tank construction is similar 
to the LOo tank's except that there are no anti-slosh baffles in the LH 2 tan ecause 
the low density fuel does not require them. Internal insulation is used to re uce 
thermal shock at tanking and to reduce heat leaks and cryopumpmg potentia s asso - 
ated with external insulation. The basic structural external frames are increase in 
section modulus at the aft attach points to the orbiter and in the main lan mg ge 
wing box attach link pickup points t 

The tanks are Joined by a cylindrical intertank section that supports the canard I pivot 
and the forward attach links to the orbiter. The intertank section is s ow g 
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The intertank section is a conventional skin-stringer-frame assembly with built-up 
frames to support the orbiter attach links and the canard pivot points. The LU 2 
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Figure 2-8. B-9U Booster Body Structure 
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Figure 2-9. B-9U Liquid Oxygen Tank 
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Figure 2-10. B-9U Liquid Hydrogen Tank 
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Figure 2-11 


B-9U Intertank Section 


lines run aft and occupy the lower intertank space. The canard pivot actuators are 
shown, four per side below the pivot point 50 inches above the body centerline. The 
intertank section contains the LH 2 and IX> 2 tanks for the ACPS and auxiliary power 
unit (APU) supply. A single LI1 2 tank for both systems is provided. The orbiter for- 
ward attach points are at the aft L0 2 dome /intertank joint and take the axial loads as 
well as pitch and side loads, while the aft attach points, which take pitch and sideloads 
only, are at Station 2666 in the LH 2 tank region (Section G-G of Figure 2-7.) 

The top of the booster is flat in the stage interface region to fair out the attach frames 
of the booster and to accommodate the booster linkage after separation. The booster/ 
orbiter separation system is a linkage type using booster thrust and orbiter inertia to 
produce positive separation. It is selected as the only system with the present con- 
figuration that will operate feasibly in the case of high dynamic pressure separation, 
as is required by abort criteria. The orbiter is arranged piggyback on the booster. 
This mating was initially done to allow rollout of the mated configuration to the 
launch pad on the booster main gear. 


Hie aft end of the LH 2 tank picks up the cylindrical thrust skirt, which is also 33 feet 
in diameter and includes truss-type thrust beams that intersect to form the main 
engine thrust pad/gimbal support points. The thrust structure is a structurally con- 
nected titanium truss beam assembly with intersecting parallel vertical and horizon- 
tal beams, as shown in Figure 2-12. The beam intersections support the gimbal pad 
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Figure 2-12. B-9U Thrust Structure 


points. The beams are constrained by peripheral frames that transfer the loads into 
the cylindrical thrust skirt. The LH 2 tank exits via a vortex baffle into a sump that 
branches into 12 fuel ducts to each engine. The engines have a fixed, low-pressure 
pump attached to the booster structure and a high-pressure pump on the engine . This 
arrangement allows the feed lines traversing the gimbal point to be of reduced dia- 
meter, eliminating the need for heavy pressure volume compensating ducts, and facili- 
tating gimballing to the required ±10 degrees. The four LO a lines branch at the aft 
end of the booster into three lines each to serve the 12 engines. The engine propellant 
inlets and thrust structure are arranged for acceptable clearance in the selected pattern. 
The L0 2 lines are designed to have equal lengths from tank exit to pump inlet to mini- 
mize residuals. Each individual propellant feed line has a prevalve for a total of 12 
for L0 2 and 12 for LH 2 . 1 

The aft skirt that flares out for the rocket pump packages is an extension of the thermal 
protection system (TPS). The fairing is pocketed to accommodate the four support and 
hold-down longerons that transmit their axial load directly into the thrust barrel. The 
external skirt that protects the thrust structure and engine pump packages from ther- 
mal and aerodynamic loads is shaped to minimize booster base area as is seen m 
view M-M of Figure 2-7. The base heat shield consists of corrugated sheet with in- 
ternal insulation. The heat shield is located in a plane through the nozzle throats of 
the main engines. Each engine has a spherical radius collar at the throat that wipes 
a matching hole in the heat shield to allow gimbal motion while maintaining a seal. 
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The base heat shield is penetrated by fill-and -drain lines and pressurization-and-purge 
lines. Electrical and other service disconnects are located as shown. The JP tank will 
be pressure fueled via a single point in the upper surface of the wing root. 

The forward end of the LO 2 tank supports a tapered skirt that terminates in a bulkhead 
that supports the nose landing gear. The main landing gear is supported from trunnion 
points on external frames attached to the LH 2 tank. As shown in Figure 2-7, the main 
gear retracts forward into the wing root fillet region. The main gear bogies incorporate 
60 x 20 inch 40 PR tires. The nose gear has dual 47 x 18 inch tires. 

The outer heat shield provides an aerodynamic surface for the body which varies from 
a circular cross-section at the nose gear station to a gradually flattening lower sur- 
face transitioning into the wing fillet. The heat shield is primarily of shallow corru- 
gated frame stiffened panels utilizing Rene / 41 alloy principally, and titanium alloy in 
die regions of lower aerodynamic heating. The heat shield is supported via links from 
the primary structure to allow for expansion. The forebody ahead of Station 1479 is 
supported as an extension of the heat shield itself and moves with it, except for the 
nose gear that, as previously explained, is supported from an extension skirt on the 
primary load-carrying LO 2 tank. The body heat shield frames are on 20-inch centers 
below the body maximum breadth and on 40-inch centers above it. 

The delta wing is mounted below the LH 2 tank. The wing carrythrough spars are 
tapered in the center section to allow the wing to overlap the tank in the side view and 
thus minimize base area. The wing attaches to the hydrogen tank frames and to the 
thrust structure via a series of links designed to take out relative expansion differen- 
tials between the wing and the body. See Figure 2-7. A low wing is selected princi- 
pally to reduce the entry reradiation wing/body intersection temperature increase 

effects in a high wing arrangement. The low wing/fillet arrangement also provides 
main landing gear stowage space . 

The wing is located aft for balance purposes. Because of the large weight of boost 
engines it is necessary to move the aerodynamic center aft to accommodate the aft 
eg in a balanced configuration, A low aspect ratio delta wing of 53 -degree sweep is 
selected to provide minimum flyback system weight, wiihin the constraints of satis- 
factory stability characteristics and landing speed. The delta wing also allows suffi- 
cient thickness to stow the flyback engines internally, which is particularly desirable 
since the shock impingement of lower surface nacelles creates excessively high tem- 
peratures. The high-sweep delta wing tends to minimize both heating and boost drag 
(also reduced with retracted flyback engines) and promises better transonic charac- 
teristics. 

Figure 2-13 shows the general arrangement of the delta wing. The wing is spliced at 
span Station 507.5 to allow disassembly for shipping. Five ACPS engines are located 
next to the rear spar. 
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Figure 2-13. B-9U Wing General Arrangement 


Hie delta wing has a theoretical area of 8451 square feet and an exposed area of 5047 
square feet installed at +2-degree angle of incidence to the body centerline to facilitate 
cruise and to reduce landing angle within the constraints of the boost loads on the wing. 
The leading edge sweep is 53 degrees. The installation of the JTF22A-4 air-breathing 
engines in the wing requires a maximum thickness chord ratio of 10.3 percent at wing 
Station 507.5 just outboard of the outboard engine. Installation of these engines e ow 
the body in the center section requires a 7.1-percent theoretical root thickness at the 
vehicle centerline. The airfoils are NASA four digit series with modifications to .the 
leading edge radii and with conical camber at the tips to improve L/D. The trailing 
edge of the wing is perpendicular to the body centerline with elevons segmented into 
three spanwise parts for varying degrees of control. The wing structure is primari y 
titanium alloy with two main structural boxes. The forward box accommodates the 
air-breathing engines. The lower surface of the wing is thermally protected by a 
system of dynaflex insulation with metallic radiation cover panels . 

Flyback engines are selected from among off-the-shelf candidates. The JTF22A-4 
is the lowest bypass ratio candidate and presents the smallest package for ms a ion. 
This condition permits low wing thickness -to -chord ratio (t/c) thus minimizing po n- 
tial control problems during transonic passage at the end of entry. Overall sys m 
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weight differences between the JTF22A-4 and the FI 01 (higher bypass ratio engine) 
are small, the savings in fuel being offset by Hie increase in engine and installation 
weight and increased cruise drag effects. The air-breathing engines are installed in 
podded configurations, pivoted at the aft support point. Each engine assembly has its 
own deployment rotary actuators. Longitudinal doors in the lower surface open to 
allow deployment of die air-breathing engines to the subsonic cruise position. The 
engines rotate through 180 degrees to the locked-^extended position. Upon engine de- 
ployment the engine bay doors close to present a clean surface for cruise and landing 
See Figure 2-14. 

The JP flyback fuel is currently stowed in a single tank on die booster centerline, 
near the center of gravity. While no fuel transfer is currently anticipated in the B-9U 
configuration for balance purposes, JP fuel presents an advantage in this respect for 
configurations having a closely coupled hypersonic/subsonic relationship requiring 
fuel transfer for eg control. The fuel is fed to the four engines under the body at 
Station 3560 and to the four engines in each wing. 

The fully pivoting canard is selected as a trim and control device and as an adjunct to 
rotation for takeoff on ferry flights. The canard is located as far forward of the wing 
as feasible to increase control effectiveness. Use of the canard allows reduction in 
wing area and elevon size and permits the use of wing high-lift devices at landing and 
for cruise improvements in the typical high drag booster configuration. The canard 



Figure 2-14. B-9U Nacelle Location, Retracted and Deployed Positions 
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provides a total exposed area of 540 square feet. The leading edge sweep is 60 degrees 
and the thickness is 14 percent. The entire surface is pivoted at 56 percent of the root 
chord and moves 65 degrees nose down to decouple the effect of the surface during hy- 
personic entry. The surface wipes a body fairing to maintain a seal at all points along 
the down travel. This seal is to minimize entry heating. Upward travel of the leading 
edge of the canard is 30 degrees. 

The vertical tail is on the centerline of the body to minimize weight relative to tip 
fins that weigh more in themselves and impose an added weight to the outboard wing 
sections due to maximum boost 8q loads and the attach complexity. Directional sta- 
bility is maintained in the booster during reentry in the high-angle -of-attack mode by 
using the AC PS yaw engines. Even after the heat sink leading edge and the extra 
ACPS weights were incorporated, a centerline vertical still showed the least overall 
system weight. The general configuration of the vertical tail structure is shown in 
Figure 2-15. 


The vertical stabilizer has an area of 
1500 square feet with a leading edge 
sweep of 35 degrees to provide orbiter 
separation clearance consistent with 
weight and aerodynamic considerations. 
The tail thickness varies from 13 percent 
at the root to 11 percent at the tip. A 
35-percent chord rudder is provided with 
±25 degrees of travel. The base of the 
rudder is cut off at 15 degrees to provide 
plume clearance for the upper rocket en- 
gines. Vent and exhaust lines are term- 
inated at the fin tip trailing edge . The 
leading edge of the vertical tail has in- 
creased material thickness to act as a 
heat sink during the brief period of plume 
impingement during orbiter separation. 

The crew module is conventionally located 
in the nose structure (see Figure 2-5). 
Structure Swivel seats adjustable for the vertical 

flight, entry, and cruise flight are pro- 
vided in conventional locations for captain and co-pilot. The crew module is pressur- 
ized for shirtsleeve environment. Heat shields are provided over the windshields, 
which are sized for adequate landing visibility at the maximum 15-degree touchdown 
angle. Access with the booster in the vertical position is via a door to the left of the 
pilot seat. Access with the booster in the horizontal position is via a door in the 
compartment floor reached through the nose-gear wheel well. Immediately behind 
the crew is space for an additional jump seat available for horizontal flight test or 
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checkout purposes. Aft of the crew compartment are the booster avionics systems 
installed in a controlled environment but separate from the crew compartment. Below 
the crew and avionics compartments is the nose-gear wheel well. 

Figure 2-16 shows the general arrangement of the crew module. It is a semi-monocoque 
structure incorporating frames and longitudinal stringers. Where space between the 
module and the nose shell structure permits, structure is installed on the exterior side 
of the skin. There are four openings in the structure: the windshield, the aft compart- 
ment access hatch, and two hatches opposite the pilots' seats. The module consists of 
two compartments, the pilots' station and the electronics compartment. These com- 
partments are separated by an internal bulkhead. The aft end of the module is closed 
by an ellipsoidal bulkhead. The electronics compartment is cylindrical in section while 
the crew compartment is faired to maintain as much curvature as is compatible with 
the hot nose structure contour and internal furnishing envelope. 



Figure 2-1$. B-9U Crew Module 
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The crew module is supported by the nose structure at four points, at two points just 
aft of the crew compartment and at two points on the frame at the en o e e ec 
compartment. The gap between the nose structure and the crew compartment at the 
aft support is spanned by a pin-ended truss. This truss minimizes thermal loads on 
both the nose structure and the module structure as the outer shell expands. 

The Environmental Control Life Support System (ECLSS) orovides thermal and pressure 
control for equipment and personnel. The ECLSS also provides a shirt-sleeve environ- 
xnent for the crew and maintains atmospheric constituents within acceptable physiological 
limits. The following summarizes the operation of the ECLSS during various p ases o 

the mission. 

Prelaunch. During prelaunch operations, cooling is accomplished by s»HS^g °ondl- 
ttoned sj Tfrom GSE to one of the air supply ducts through a rise-off disconnect. Thte 
air is then distributed to the flight deck and equipment bay. The airflow is finusLe 
through the outflow valves into the area between the liquid oxygen tank and the no 
structure. This area is being purged with GN 2 and, therefore, the pressure in the crew 
module will be 15 psia which is higher than the purge area pressure which is in . tu 
higher than the ambient pressure. At lift-off, blowers mounted in both the fl'ghtdeck 
and equipment compartment are turned on and air is recirculated to provi e con mu 

cooling. 

Boost. During boost, the cabin pressure regulator is closed and the module pressure 
d^ s because of leakage. Since it isn't possible to determine what the leakage a 
will be, it is assumed for purposes of structural analysis that the mternal ca in pr - 
sure remains at 15 psia throughout the mission. Cooling is maintained by recirculating 
air in the individual compartments which transfers personnel and equipment heat to 
structure and furnishings. 

Reentry. Operation la continued as In the boost phase. The outflow valves remain 
closed and cabin pressure continues to decrease due to leakage. As decent continues, 
tb^mtflow valve negative relief hmction prevents the module from becoming more dian 
two to three inches of water negative with respect to ambient pressure. During 
period, the thermal capacity of the system and the surrounding structure will limit 
temperature rise to an acceptable level. Because of the short time of closed-loop 
operation, the only life support needs are temperature and pressure contro . 

Flyback. After the cruise engines have been started, the air-cycle refrigeration sys 
tern is”used to provide cooling and cabin pressure control. 


Post- 

down. 


-Landing. Operation continues as during flyback until the cruise engines are shut 
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2.3 BOOSTER STRUCTURAL MATERIALS 


Materials for the space shuttle booster structure fall into several categories: (1) alu- 
minum alloys, (2) beryllium alloys, (3) titanium alloys, (4) nickel base alloys, (5) 
cobalt base alloys, (6) columbium alloys, and (7) composite materials. Primary 
candidate materials have been selected on existing properties data or data generated 
under space shuttle studies. To provide an efficient final design, the properties of 
some of these materials must be investigated to determine their allowable properties 
after exposure to the expected environments. Table 2-2 lists the primary structural 
mater ials for the B-9U major structural components selected for detailed study. 

The wing box is primarily fabricated from titanium with a thermal li mi t of 800° F. 
Titanium was selected due to its high specific modulus and strength and low thermal 
stress index at 650 F. Titanium has well defined mechanical and physical properties 
and the fabrication, machining, and welding techniques are well known. 

The basic structural concept of the wing is based on the use of a metallic standoff heat 
shield combined with insulation between the shield and the wing lower surface struc- 
ture to provide thermal protection for the whole wing structure except for the hot lead- 
ing edge. This allows efficient use of titanium for all of the primary and secondary 
structure above the TPS while the TPS shield itself can be made of HS188 and coated 
columbium. The Haynes 188 material is thermally limited to about 1900° F and the 
coated columbium to 2500° F. Both these materials were selected for their thermal 
strength properties. 

The vertical stabilizer structural arrangement is a three-spar, multi-rib configuration 
with integrally stiffened skin/ stringer panels. Spar and rib webs are of corrugated or 
trussed construction to allow for differential thermal expansion. The rudder is of 
similar construction. The entire structure is titanium except for the leading edge 
which is Inconel 718. The segment of leading edge that is subjected to the orbiter en- 
gine exhaust impingement is "heat sink" designed to withstand the increased tempera- 
ture. Again titanium is selected due to its strength at temperatures that preclude 
aluminum, and its adaptability to a variety of proven fabrication techniques. 

The crew module is constructed of 2219-T87 aluminum alloy except in those areas 
where the hot nose structure is in close proximity to the module structure. In these 
regions, such as the windshield frame and the pilots' hatches, the structure is fabri- 
cated from annealed 6A1-4V titanium alloy. With the exception of the glazed areas, 
the entire compartment is shrouded by a fibrous insulation blanket. The inner door 
windows are fabricated from heat tempered glass. The outer door windows are made 
from fused silica glass. The windshield is a laminated glass with an electrically con- 
ductive film for anti-icing. The floor and the bulkhead separating the electronics com- 
partment from the crew station consist of aluminum alloy honeycomb panels backed 
up by a grid work of beams. 
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Table 2-2. Booster Materials 


Booster 

Components Sub- Components 

Wing Box Spar Caps 
Spar Webs 
Rib Caps 
Rib Webs 
Inter cos tals 

Lower Surface Thermal Skins 
Upper & Lower Structural Skins 
Trusses 



Fasteners 

Vertical 

Spar Caps 

Tail Box 

Spar Webs 

Ribs and Bulkhead Caps 
Ribs and Bulkhead Webs 
Integrally Stiffened Skins 
Stiffeners 
Fasteners 

L0 2 Tank 

Integrally Stiffened Skins 
Frame Caps 
Frame Webs 
Bulkheads (Dome) 
Fasteners 

LH 2 Tank 

Note LO 2 Tank 

Orbiter 

Beam Caps 

Support 

Beam Web 

Bulkhead 

Bulkhead Caps 
Bulkhead Webs 
Fasteners 

Thrust 

Skins 


Structure Thrust Beams 
Thrust Posts 
Bulkheads 

Vertical Stabilizer Attach 
Fittings 

Intermediate Frames 
Attachment Flange 
Fasteners 
Base Heat Shield 

Crew Skin 
Module Frames 

Longerons 

Bulkheads 

Hatches 

Windshield frame 


M aterials 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) ! 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Haynes HS-188/Coated Columbium 
Annealed Titanium j 

Annealed Titanium j 

Conventional Except for Lower i 

Thermal Skin I 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) I 

Annealed Titanium (6A1-4V) - 

Annealed Titanium (GA1-4V) J 

Annealed Titanium (6A1-4V) j 

Conventional 

Aluminum Alloy 22 19-T87 
Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Conventional 

Same as LO 2 Tank Except for Poly- 
phenylene Oxide Insulation 

Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Conventional 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 

Conventional 

Rene 41 & coated Columbium 

Aluminum Alloy 2219-T87 
Aluminum Alloy 2219-T87 
Aluminum Alloy 22 19 - T8 7 
Aluminum Alloy 2219-T87 
Annealed Titanium (6A1-4V) 

Annealed Titanium (6A1-4V) 
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The main LO 2 and LH 2 fuel tanks are fabricated almost entirely of 2219 aluminum. 
Both 2219 and 2014 aluminum alloys were considered for the main tanks and other 
body structures. Both alloys possess excellent strength-toughness properties in the 
base metal at all temperatures down to -423° F, with the 2014 alloy being somewhat 
stronger than 2219. However, welded joints in the 2014 alloy exhibit a tendency to- 
wards brittle fracture and greater sensitivity to minor weld flaws at liquid oxygen to 
liquid hydrogen temperatures. The significantly greater resistance to stress corro- 
sion possessed by the 2219 alloy has been thoroughly demonstrated, as has its super- 
ior weldability and weld repairability. The combination of better fracture toughness 
in welded joints at reduced temperatures and superior resistance to stress corrosion 
result in a significantly higher reliability for the 2219 alloy as compared to 2014. 

Both 2219 and 2014 exhibit a decrease in strength properties as the plate thickness 
increases. Both the ultimate and the yield tensile strengths of 2014 decrease with 
increasing thickness at a greater rate than does the yield strength of 2219. Conse- 
quently, if the tank walls must be machined from 3 to 4 inch plate in order to accom- 
modate integral stiffeners or weld lands, the strength advantage of 2014 is minimized. 

Although 2014 shows an advantage in strength of the base metal, Convair Aerospace's 
choice of the 2219 aluminum alloy for the space shuttle propellant tankage is based 
upon its superior weldability, much better resistance to stress corrosion cracking, 
better overall toughness, and better reliability for the reusable manned space launch 
vehicle. 


Table 2-3. B-9U Weight Summary 


Weight (lb) 

Wing Group 

59,063 

Tail Group 

17,908 

Body 

174,229 

Induced environment, protection 

86,024 

Landing, recovery, dock 

28,457 

Propuls ion -ascent 

124,786 

Pr 0 pul s ion -cru i se 

49,513 

Propuls ion -aux iliary 

12,126 

Prime power 

1,930 

Electrical 

1,682 

Hydraulics 

2,201 

Surface controls 

9,620 

Avionics 

5,582 

Environmental control 

1,648 

Personnel provisions 

1,636 

Contingency 

50,705 

Dry we ight 

627,110 

Personnel 

476 

Residual fluids 

11,503 

Inert weight 

639,089 

Inflight losses 

21,718 

Propellant -asce nt 

3,382,307 

Propellant-cruise 

143,786 

Propellant-ACS 

1,500 

Gross weight 

4,188,400 


2. 4 BOOSTER WEIGHT SUMMARY 

Table 2-3 is a summary weight statement 
for the B-9U booster in the launch condition. 
This launch condition is for the mission de- 
scribed in Section 2. 1, and assumes that the 
orbiter launch weight will be about 859,000 
pounds. In Table 2-3, weights are broken 
down to show individual major system 
weights. The weights were taken from 
Reference 6. 

A more detailed breakdown of the weight 
of the major structural components chosen 
for study is given in Table 2-4. 

Table 2-5 gives the booster mass properties 
sequence during the mission detailed in 
Section 2. 1. Changes in weight, center of 
gravity, moment of inertia, and product of 
inertia are given. 
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Table 2-4. B-9U Component Structural Weight Breakdown 


Description 

Wing Group 
Box* 

Spar Caps, Upper 
Spar Caps, Lower 
Rib Caps, Upper 
Rib Caps, Lower 
Upper Cover 
Lower Cover 

Inner Spar Webs and Trusses 
Inner Ribs and Webs 
Miscellaneous 

Wing-Fuselage Attach Fittings and Links 
Leading Edge, Trailing Edge and Tips 
Secondary Structure 
Control Surfaces 

Tail Group 
Canard 

Vertical Tail Box* 

Spar Caps 

Cover 

Spar Webs and Stiffeners 
Miscellaneous 

Vertical Tail Leading Edge, Trailing Edge and Tips 
Rudders 

Body Group 
LH 2 Tank * 

Skin Panels 

Frames 

Forward Dome Assembly 
Aft Dome Assembly 
TPS Support Frames 
Orbiter Support Structure 
Miscellaneous 
LH 2 Tank Insulation 
LO2 Tank* 

Skin Panels 
Frames 

Forward Dome Assembly 
Aft Dome Assembly 
Miscellaneous 

Forward Orbiter Support Structure 
Nose 

Forward Skirt Structure 
Intertank Structure 
Thrust Structure* 

Skin Panels 
Frames 
Thrust Beams 
Thrust Posts 
Ground Fittings 
Bulkheads 
Miscellaneous 
Crew Module 
Skin* 

Bulkhead and Frames* 

Longerons 

Doors 

Floor 

Windshield 
Miscellaneous 
Base Heat Shield 
Interstage Mechanism 
Main Landing Gear Provision 

Thermal Protection System 

* Component selected for study. 


6 . 105.3 
5 , 685.0 

1 . 345.6 

1 . 312.7 
4 , 256.9 
6 , 802.6 

6 . 287.8 

7 . 248.4 
4 , 059. 2 


692.7 
4 , 168 . 0 
1 , 161.3 
705 , 0 


Subtotal 

(lb) 


1 , 056.8 

3 . 825. 7 

5 . 149.8 

5 . 926.9 


174,229 


1 , 976.6 
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Table 2-5. Sequence Mass Properties Statement, B-9U Booster 
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2.5 DESIGN CRITERIA 

The booster vehicle Is designed to provide adequate structural utrengftfor 

of 100 missions, or for a ten year life, without the need for major repairs TOisde 

s to. is capable of withstanding the service life of flight and pressure loads 

wX the thermal and acoustic environment. Booster structure it ' *°* ” ffiize 

mum weight commensurate with overall costs and the vehicle Is designed 

post-flight inspection requirements for rapid turnaround. 

Structural components are designed to provide the yield and ultimate 

aX proof factors shown in Table 2-6. Service life factors (^tter factors are given 

in Table 2-7, and safe-life design environments are presented In Table 2-8. 

The LO tank is designed to be proof-tested In segments because of weight savings, 
u^gXCt-phXe P^oof test. The entire LH 2 tank is designed to W-a-* 
proof-tested at room temperature. The thermal prote^tm systemfTO ) 
also designed for the load factors In Table 2-6, as applicable. In addition, an al mva 
creep strain of 0. 2 percent per 10 hours exposure at maximum temperature 
used and for corrugated panels in the transverse direction, 1. 0 percent creep 
per 10 hours exposure at maximum temperature. A minimum clearance of. 
IXen" er tank structure and the outer TPS structure will be maintained at limit 

load. 

The booster is designed to withstand the repeated loads (fatigue) incujmed in 400 flights 
^ih^failure mcTding a scatter factor of four. Consideration will be given to the 
effects of acoustic fatigue loads. The booster will 

vironments with a minimum of post-flight inspection and subsequent structural 
bishment and/or replacement. 

The nrimarv structural components will be designed fail-safe insofar as practical. 
^s"weS cost, and manufeotoring. me n P^“ 

adapter, and similar major load-carrying structural components 
as spar caps and wing /body attach links. 

Uafe-life designs will be compatible with latest NDI (nondestructive inspection) tech- 
niques and limitations and residual strength and cr ^ rof ^^ “ r £ denned to 
used to ensure that adequate safe-life has been provided The booster 
provide a safe-life of 150 missions, including a scatter factor of . . 

Conventional strength, fail-safe, and fatigue anaiyses 

mechanics analysis to determine critical flaw sizes and residual life assuming p 
existing flaws. 
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Table 2-6. Design Criteria 


Component 

Yield 

Main Propellant Tanks 

1. 10 


1. 10 


1.00 

Personnel Compartments 

1. 10 


1.50 

Windows, Doors, Hatches 

1. 00 

Airframe Structure 

1. 10 


1. 10 

Pressure Vessels 

— 

Pressurized Lines Fittings 

— 

All Components (Abort Conditions) 

1. 10 

All Components (Thermal Stresses) 

1.00 


1.00 


LC>2 Tank 
LH 2 Tank 

♦Based on fracture mechanics analysis 
Assumed service life = 100 missions 


Ultimate 

1.40 

1. 40 

1.50 

2. 00 

3.00 
1. 40 

1.50 

2.00 

2.50 

1.40 

1 . 00 
1.25 


p roof Applied On 

* Maximum relief valve pressure only 

— Loads (+ limit pressure) 

“ Proof pressures 

— Loads (+ limit pressure) 

1. 50 Maximum operating pressure only 

— Proof pressure 

2.00 Maximum operating pressure only 

— Boost + entry loads 

— Aircraft mode loads 

1* 50 Maximum operating pressure 

1. 50 Maximum operating pressure 

Abort loads (+ limit pressure) 

— Thermal forces (+ flight loads) 

— Thermal forces (alone) 

1. 23 Max. relief valve pressure 


1. 13 Max. relief valve pressure 


Table 2-7. Service Life Factors 


Factor Applied On 


Fatigue initiation 

4.0 

Design service life 

Flaw growth to leak 

1.5 

Design service life 

Flaw growth to failure 

X. 5 

Design service life 

Creep 

4. 0 and 2. 0 

Accumulated creep strain 


Note: Design service life - 100 missions and 10 years of operation. 


Table 2-8. Safe-Life Design Environments 

Component Design Environment 

LOg Tank LOg @ -320° F or GOg @ 70° F 

LH 2 Tank Air at 70° F 

Intertank Adapter 7Q 0 jr 

TPS, Wing, Canard 

Empennage, Thrust Structure, 

and Orbiter Attachments 3-1/2% salt solution with alternate drying 
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2. 6 DESIGN CONDITIONS 


Booster design conditions were generated from ground handling procedures and from 

mission flight characteristics. The flight conditions Investigated include: 

ascent, entry, subsonic cruise, and horizontal takeoff and landing. 

number, angle of attack, and control surface deflections or in^s Sted 

directional characteristics were also included. The ground conditions investigated 

were taxi, towing, mating, and launch preparation and erection. 

In most instances, the aerodynamic data was based on available experimental data 
adjusted for differences between tested and current configuration. 

Table 2-9 summarizes limit flight loads and design load factors for a number of the 
crmcid mission conditions. Maximum loads on the body, wing, and canard occur 
during maximum g recovery (i.e. , entry), while maximum 0q during ascent yields the 
greatest load on the vertical stabilizer. Critical design conditions and considerations 
for aerodynamic surfaces are summarized in Table 2-10. 

Internal loads consisting of axial and shear loads and bending and torsion moments 
were determined at 48 stations along the body length for 25 load conditions. The 
conditions investigated are: 


1. One-hour ground headwinds, fueled, unpressurized 

2. One— hour ground tailwinds , fueled, unpressurized 

3. One-hour ground sidewind, fueled, unpressurized 

4. Liftoff + 1-hour ground headwinds 

5. Liftoff + 1-hour ground tailwinds 

6. Lif toff + 1-hour ground sidewinds 

7. Maximum a q headwinds 

8. Maximum aq tailwinds 

9. Maximum j3q 

10. Three-g maximum thrust 

11. Booster burn-out 


12. Maximum g entry 


13. Subsonic gust 

14. Two-point landing 

15. Three-point landing 


Table 2-9. Summary of Booster Design Conditions and Loads 


Condition 

Component 
(or Mass Item) 

n 

X 

n 

y 

n 

z 

Limit 
Air Load 
(lb /panel) 

Remarks 

Two week standby 


1.0 





One day hold 


l.o 





One hour to launch 


1.0 





Lift-off 

(L0 2 mass) 

1.31 ± 0.15 




- 


(LH 2 mass) 

1.31 ± 0.25 






(Orbiter & other) 

1.31 ± 0.21 





Max. dynamic pressure 







Max aq 







Headwind 

Body 

1.61 

0 

0.51 

537,000 



Wing 

1,61 

0 

0.51 

666,800 



Canard 

1.61 

0 

0.51 

45,430 


Tailwind 

Body 

1.67 

0 

-0.19 

-220,000 

Provides, with booster 


Wing 

1.67 

0 

-0.19 

-98,600 

burnout condition, criti- 


Canard 

1 . G7 

0 

-0.19 

-45,360 

cal loads for orbitcr- 







booster attachment. 

Max 0q 

Body 

1 .GO 

± 0.213 

0.01G 

130,000 



Wing 

1 ,G0 

± 0.213 

0.016 

485,000 



Canard 

1 .GO 

± 0.213 

0.016 ! 

19,520 



Vertical tail 

1.60 

i. 0.213 

o 

o 

o’ 

-hi 87 , 1 00 


Max. thrust 

Body 

3.3 

0 

0.242 


Provides critical intcrtia 


Wing 

3.3 

0 

0.242 


loads for wing -to -body 


Canard 

3.3 ! 

| 

0 

0.242 


drag links, and together 

Booster burnout 

Body 

3.3 

0 

0.343 


with max, aq condition, 


Wing 

3.3 

o 

0 343 


critical loads for or bite r- 


Canard 

3.3 

0 

0.343 


- booster attachment. 

Max. g recovery 

Body 


0 

4.0 

1,507,000 



Wing 


0 

4.0 

808,600 



Canard 


0 

4.0 

0 


• 2.5g maneuver 

Wing 

0 

0 

2.5 

617,600 



Canard 

0 

0 

2.5 

71,370 


Rudder kick 

Vertical tail 




±204,000 


Subsonic gust 

Body 

0 

0 

2.1 

488,000 



Wing 

0 

0 

2.1 

591,500 



Canard 

0 

0 

2.1 

-4,957 



Vertical tail 

0 

0.5 

1.0 

±272,000 


Landing 

Body 

0 

1 0.35 

2.35 

208,000 



Wing 

0 

± 0.35 

2.35 

376,000 



Canard 

0 

± 0,35 

2.35 

47,000 



16. Two-g taxi 

17. One -day ground headwinds, fueled 

18. One-day ground tailwinds, fueled 

19. One-day ground sidewinds, fueled 

20. Two-week ground headwinds, unfueled, unpressurized 

21. Two-week ground tailwinds, unfueled, unpressurized 

22. Two -week ground sidewinds, unfueled, unpressurized 
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Table 2-10. Summary of Design Conditions for Aerodynamic Surfaces 


Structural Design Summary Chart 

Structural Component 

Critical Condition 

Design Considerations 

Wing: 

Primary Sub-Structure 
Upper Skin Panels 
Lower Skin Panels 
TPS Heat Shield 
Elevon Sub-Structure 
Leading Edge 

Max aq ~ Boost 
Liftoff Sound Pressure 
Max g ~ Recovery 
Liftoff Sound Pressure 
Max g ~ Recovery 
Max Heating ~ Recovery 

Wing Shear & Bending 
Sonic Fatigue 

Pressure & Temp Differential 
Sonic Fatigue 
Air Pressure 
Pressure & Temperature 


Wing/Body Attachment: 
Fwd Vertical Attach 
Center Vertical Attach 
Aft Vertical Attach 
Drag Attach 
Fwd Side Load Attach 
Aft Side Load Attach 
Center Side Load Attach 

Canard 

Primary Substructure 
Torque Tube 

Vert. Tail 
Primary Structure 


Subsonic Gust ~ Flyback 
Max aq ~ Boost 
Max aq~ Boost 
Max Thrust ~ Boost 
Max Thrust ~ Boost 
Max Thrust ~ Boost 
Taxi 

Max g ~ Recovery 


Max 0q ~ Launch 


Safe- 

Safe- 

Safe- 

Fail- 

Fail- 

Fail 

Fail 


■Life 

-Life 

-Life 

-Safe 

-Safe 

-Safe 

-Safe 


Canard Structure & Torque 
Tube Shear, Bending, Torsion 

Box Shear, Bending 


23. 2. 5 g positive maneuver 


24. -1. 0g negative maneuver 

25. Maximum operating pressure 

An envelope of the resulting peak load intensities (N x ) for the most critical conditions 
is shown in Figure 2-17, where N x is the longitudinal axial load in the tank wall. The 
major loading conditions on the forward skirt are due to axial loads occurring during 
boost phase and shear loads during landing and taxiing conditions. 


Proof pressures on the L0 2 tank determine the skin gages of domes and the cylinder. 
Stiffening on the cylindrical body is required for flight and ground loads. The aft dome 
is grid-stiffened close to the equator because of compressive hoop loads occurring in 
the partially filled condition. External stiffening, consisting of tee stringers an 
trussed frames, was optimized for the low load intensities typical of the LQ 2 tank. 
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Figure 2-17. B-9U Booster Peak Limit Load Intensities 

LH 2 tank skin gages of the domes and cylindrical section are determined by proof-test 
requirements at the forward end of the tank, and by ultimate shear and axial load plus 
pressure for flight conditions in the central and aft portions of the tank. Optimized 
tank stiffening in the form of tee stringers and external frames, critical for axial and 
bending loads occurring during ground winds and boost, is provided. 

Critical design conditions for the intertank structure are derived from axial loads due 
to the LO 2 weight forward and the bending and axial load introduced at the forward 
attachment by the eccentric orbiter weight. 

A total of 30 loading conditions on the thrust structure were investigated, including 
ground-wind, launch, and boost phase loads with and without engine-out conditions. 
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Ground-wind conditions ore critical for hold-down fittings, back-up longerons, and 

adjacent skin on the skirt. Thrust 

down longerons are critical for maximum aq g 

one engine out. 

Table 2-11 summarises the arbiter /booster interconnection loads, including loads for 
a number of critical conditions. 

Net limit pressure (including 2T" 

boost is shown in Figure 2-18 for e 2 ^ pressure line for a pneumatic 

upper bound of a 3 psi regulating band. Also shown is the preBSun ’ ™ * 

proof test, which requires a proof factor equal to . as 

Table 2-11. Booster /Or biter Interconnection Loads 



CONDITION 

TWO-WEEK GROUND WINDS, 
UNFUELED, WITH TOWER 
SUPPORT 

ONE -DAY GROUND WINDS, 
FUELED, WITH TOWER 
SUPPORT 

ONE-HOUR GROUND WINDS, 
FUELED, UNSUPPORTED 

DYNAMIC LIFTOFF PLUS 
ONE-HOUR GROUND WINDS 


F x r* "y -z « 

(KIPS) (KIPS) IKIPS1 (KIPS) (KIPS) (X 10 6 IN-LB) 


MAX a-q 


MAX 0-q 


3g MAX 
THRUST 


BOOS I ER 
BURNOUT 


cv-q — 2800 
of-q =-2800 


N x = 3.3 N = 0 N z = -< 
N* = 3.3 Nt-jO-tN, = -l 

N x = 3.3 Ny = 0 N z = -0 

N x =3. 3 Ny=l0.1 N z = -C 



268 0 
268 0 
268 +98.5 


56.9 0 

-119.0 0 

28.8 +30.2 



859 +33.3 | 80.0 1 ti ». i 


V 

1296 +20.5 121.0 +2.92 


1798 0 224.8 0 

1804 0 83.0 0 

NOWINDI 1808 0 l 37 - 4 

1802 +81.2 128.8 +166,8 

2849 3 l 35 - 2 0 

2849 + 55.4 179.3 +30.7 

2841 0 62.9 0 

+55.4 118.3 +30.7 
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Figure 2-18. LHg Tank Net Pressures vs Tank Station 

Net limit pressure for the LO 2 tank (including dynamic head) versus tank station at 
various times during boost is shown in Figure 2-19. These pressures pertain to the 
upper bound of the relief valve tolerance band. Also shown are the pressure lines for 
a three-phase proof test program using a lg LN 2 head on a vertical tank position for 
the first two phases and a room-temperature pneumatic phase. A proof factor of 1. 23 
is required based on 150 missions. 


The tank proof test factors of 1. 13 and 1.23 are based on fracture mechanics analysis, 
assuming the given service life spectrum, material, and flaw growth characteristics. 



Figure 2-19. LO 2 Tank Net Pressures vs Tank Station 
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Critical design conditions for the body, wing, canard, and vertical tail structure arc 
summarized in Table 2-7* 

o on 0 91 onH 9 99 nresent critical shear moment and torque values, together 
™ for the‘wing, canard, and vertical tail respectively. 

'^' e ^ssion ^Ijocal crUi^l^eating^^&^^^hea^shield^tnd ^dcter'occurs 

Z: “3'the top of me body and ft. vertical tail ieading edge receive criti- 
cal heating during orbiter separation. 

Design temperatures used in siring the booster outer thermal protection system struc- 
ture are shown in Figures 2-23 and 2-24. 

fairly localized. Figure 2-26 shows the wing a ^ acoug _ 

noise at launch and air-breathing engine noise during cruise, 
tical inputs for launch are shown in Figure 2 27. 
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BENDING MOMENT 



Figure 2-21. Canard Loads (Limit) 



Figure 2-22. Vertical Tail Loads (Limit) 
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r 1 

490F / / 


^25^^-1155 F 





STATION 3300 


STATION 2400 


STATION 1400 


J20 DEGREES 


'SO DEGREES 


0 DEGREES 


NOTE- LO TANK WALL TEMPERATURE ASSUMED TO VARY FROM -320'F TO 70T. 
LUo TANK WALL TEMPERATURE ASSUMED TO VARY FROM -100*F TO 70“F 


Figure 2-23. Body Design Temperatures 


TEMPERATURE (F) 



/' B-^'7 1 1 sss y 

^ 2450 / 

3000 C.--- 



A INNER SKIN TEMPERATURE 


I TITANIUM 
I INCONEL 718 
I RENE 41 
I H$ 18 8 

I COATED COLUMBIUM 

i car bon/car bon 


♦TEMPERATURE INCLUDES 200F FOR 
EFFECT OF SEMI-FLAT SURFACE 


NOTE WING SPAR CAP TEMPERATURE ASSUMED 
TO REMAIN AT 70’F BECAUSE OF HEAT SINK EFFECT 


Figure 2-24. Aerodynamic Surfaces Temperature 
and Materials Distribution 




THIRD OCTAVE BAND CENTER FREQUENCY (Hz) 


Figure 2-25. Acoustics on Launch Pad 



Figure 2-26. Contours of Equal Overall Sound Pressure Levels, Wing 
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Table 2-12. External Noise Levels on Booster Structure 




— 

Max. 

Max. 






1/3 

1/3 


Corre- 

Flight 

Condition 


OASPL 

OBSPL 

OBSPL 


lation 

Noise Source 

(db)(4) 

(db)(4) 

GMF(Hz) 
_(4) 

Incidence 

Distance 

Launch 

Rockets 

165<D 
154. 5< 2 ) 

153 

143 

250 

63-250 

Random 

Random 

Large 

Large 

Ascent 

Unperturbed 
boundary layer 

149< 2 ) 

140 

4000 

Grazing 

Small 


(B.L.) 

Shock -B.L. 
interaction 

154.5< 2 > 

146 

10 

Grazing 

Small/ 

medium 

Reentry 

Unperturbed 

B.L. 

151< 2 ) 

141 

4000 

Grazing 

Small 

Cruise* 

ABES @ 

133< 3 ) 

123 

560 

Grazing/ 

random 

Small/ 

medium 

(per engine) 

10,000-ft 
alt. and 
0.5 Mach 







Ferry 

ABES @ S.L. 

170( 3 ) 

160 

1000 

Grazing/ 

random 

Small/ 

medium 

takeoff* 

and zero air- 





(per engine) 

speed 







|Notes: (1) 15 feet above rocket nozzle plane. 

(2) Area of crew compartment. . 

(3) About 10 feet aft of engine exhaust nozzle and o feet off eng n 

centerline. 

(4) OASPL = overall sound pressure level 
OBSPL - octave band sound pressure level 
GMF = geometrical mean frequency 

♦These levels are given per engine because they represent very near field daU that 
IlTsubJect to wide variations for small changes in reference coordinates. The 
levels shown are for a plane through the apex of the jet exhaus core. 


dB 



Figure 2-27. Contours of Equal Overall Sound 
Pressure Levels, Vertical Tail 
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2. 7 SERVICE LOAD SPECTRA 


This section presents the flight load and pressure load spectra expected during the 100- 
mission service life of the space shuttle booster. Load spectra for the components 
selected for detail study (i. e. , tanks, wing, vertical tail, thrust structure, and orbiter 
support) are presented. 

2 - 7 * 1 WING LOAD SPECTRA. Figure 2-28 presents the wing flight load spectra for 
a 100-mission vehicle life under ascent, entry, cruise/landing, and taxi conditions. 

The spectra are expressed in terms of number of exceedences versus alternating and 
mean bending moment, which are shown in percent of the critical value for the condi- 
tion considered. These values are converted to number of cycles of mean and alter- 
nating stress, with the ascent condition represented by various segments of the total 
ascent flight to orbiter separation. 

2 * 7 * 2 * VERTI CAL TAIL LOAD SPECtkA . The vertical tail flight load spectra are 
presented in Figure 2-29. As with the wing, the numbered lines represent various 
segments of the ascent flight. 

2 * 7 * 2 FUSELAGE LOAD SPECTRA. The spectra of booster fuselage axial load in- 
tensity (i. e. , net longitudinal load in the tank shell due to axial and bending loads, in 
lb/in. ) are presented in Figure 2-30 for the top and bottom centerline locations at 
Fuselage Station 2600. Station 2600 is located at the aft orbiter-to-booster attach- 
ment and Is the most highly loaded fuselage section. For the top centerline location, 
the design load intensity and cyclic load are compression. For the bottom centerline 
location, the design load intensity and cyclic loads are tension. 

2 - 7. 4 ORBITER-TO-BOOSTER ATTACHMENT LOAD SPECTRA . The forward 
orbiter-to-booster attachment flight load spectra are presented in Figure 2-31. 

Only vertical (Fg) and lateral (Fy) loads are shown, as the drag load (i. e. , F x ) 
is taken through the aft attachment. The aft orbiter-to-booster attachment flight load 
spectra are given in Figure 2-32. 

2 * 7 * 5 THRUST LOAD SPECTRA. Figure 2-33 is a plot of the total mean thrust 
versus time for the 12 booster main rocket engines. Superimposed on this is the 
transient thrust load spectrum presented in Figure 2-34. 

2 * 7 - 6 PROPELLANT TANK PRESSURE SPECTRA. The main LH 2 and L0 2 propellant 
tank pressure schedules are presented in Figure 2-35 and 2-36, respectively. Nominal 
ullage and ullage plus fuel head pressure at the lower tank apex are shown. In addition, 
the maximum design pressure (i. e. , maximum relief valve setting plus fuel head) as- 
suming a pressure regulator malfunction is shown. For fatigue and flaw growth studies, 
it will be assumed that a pressure regulator malfunction occurs once every 20 flights. 

2 * 7* 7 CREW M ODULE PRESSURE SPECTRUM . The pressure schedule for the crew 

module is presented in Figure 2-37. This curve is based on an absolute internal pres- 

sure of 15 psi at liftoff and no pressure leakage after the closing of the pressure regulator. 
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Figure 2-28. B-9U Wing Load Spectra 



Figure 2-29. B-9U Vertical Tail Load Spectra 
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Figure 2-31. B-9U Orbiter Forward Attachment Load Spectra 












LIFTOFF 


TIME FROM LIFTOFF, t (seconds) 

Figure 2-33. Total Mean Booster Main Engine Thrust 
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Figure 2-34. Thrust Spectrum (One Flight)' 






, NOMINAL ULLAGE + FUEL HEAD PRESSURE 

' at lower dome apex 


^ max relief valve setting 
, nominal ullage pressure 


, pressure regulator band 


> design pressure at lower dome 
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Figure 2-35. Booster Main LH 2 Tank Pressure Schedule 
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Figure 2-36. Booster Main L0 2 Tank Pressure Schedule 
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SECTION 3 


STRUCTURAL SIZING AND SENSITIVITY OF WEIGHT 
TO FACTOR OF SAFETY PERTURBATIONS 
FOR BASELINE BOOSTER 


This section presents the sizing analysis of the booster structural components selected 
for study under this contract. The components studied are the liquid oxygen tank, liquid 
hydrogen tank, aft or biter support frame, thrust structure, wing, vertical tail, and 
crew module. The sensitivity of the weights, determined through this sizing procedure, 
to factor of safety perturbations are then determined. 

3. 1 LIQUID OXYGEN TANK 

3. 1. 1 LOg TANK STRUCTURAL SIZING . The LO 2 tank is critical for the internal 
pressures and external loads presented in Section 2. 6. Sizing of the various elements 
of the tank and the sensitivity of their weights to factor of safety perturbations are 
presented in the following paragraphs. 

3. 1. 1. 1 LOg Tank End Domes. Upper and lower LO£ tank end domes have been sized 
for ultimate, yield, and proof test loads. Dome sizing and weight calculations were 
performed by means of a propellant tank dome synthesis computer program (Reference 
12). This program determines the skin thickness requirements at four locations along 
a dome meridian and calculates dome weight assuming a stepped thickness change. 

The upper dome is not in contact with liquid oxygen during critical design conditions; 
consequently, the structure will be near room temperature. Proof testing of the upper 
dome will be performed at room temperature. 


The lower dome is in contact with liquid oxygen during critical design times and will be 
proof tested with liquid nitrogen. 


Dome structural material is 2219-T87 aluminum alloy with the following properties: 



Room 

-297° F (liquid 

-320° F (liquid 


Temperature 

oxygen temperature) 

nitrogen temperature) 

F tu < k8i > 

63 

75 

78 

F ty (ksi) 

52 

61 

62 

E c (psi) 

10. 8(10) 6 

10. 8(10)® 

10. 8(10)® 

w (lb/in 3 ) 

0. 102 

0. 102 

0. 102 
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Design conditions are as follows: 




0.8B 



V^ 2 

0.6B 

\ , 

| 


0.4B 

3l_ 

\ 



1X> 2 TANK END DOME 

SKIN THICKNESSES, IN. 


FORWARD DOME 

AFT DOME 


PROOF 

ULTIMATE 

PROOF 

ULTIMATE 


-320’ F 

T RT 

T -320* F 

T--297* F 

tj 

0.044 

0.041 

0.002 . 

0.088 


0.048 

0. 045 

0.000 

0.095 

h 

0.053 

0. 040 

0. 100 

0.105 j 

‘4 

0.058 

0.054 

0.120 

0. 115 


Ultimate design, 

Upper dome pressure = 17. 5 psi 

Lower dome pressure = 40. 0 psi 

ullage 

Ultimate factor = 1. 4 

Yield factor =1.1 

Proof pressure test design 
(proof factor, ot = 1. 23) 

Upper dome pressure = 17. 5 (1. 23) 

= 21. 6 psi 

Lower dome pressure = 40 (1. 23) 

= 49. 1 psi 


Both LO z tank domes are therefore designed by proof pressure for the baseline. 

3 iis> lo„ Tank Plate-Stringers. Plate-stringers for the L0 2 tank have been sized 
to carry t^ pressures and fuse l^e external loads. Plate-stringers were optimteed 
by sJg the skin for pressure and then sizing longitudinal stiffeners (stringers) fo 
aLl loads. Skins are critical for proof pressure, as shown in this analysis, and 
stringers are sized for the maximum axial compression load. 

Material: 22 19-T87 plate, three inches thick 


Properties at 

Room Temperature 

-320° F 

-297® F 

F tu (ksi) 
F ty (ksi) 

63 ' 

63(1.24) = 78 

63(1. 19) = 75 

51 

51(1. 19) = 61 

51(1. 17) = 60 

F (ksi) 
su' ' 

38 



E c (psi) 

10.8(10)° 



w (lb/in 3 ) 

0.102 




Allowable working tension stress at limit pressure: 


At room temperature, 

Ultimate design ~ 4 = 45. 0 ksi (1. 4 ultimate factor) 
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Yield design — — = 46. 4 ksi (1. 1 yield factor) 

X# X 

51 

Proof design — — = 41. 5 ksi (1. 23 proof factor) 


At -297° F, 


Ultimate design — - = 53. 6 ksi 
60 

Yield design — = 54. 5 ksi 

X* X 

At -320° F, 


Proof design = 49. 5 ksi 

X* 60 


For pressure design the skins are proof test critical. 


Tank skins from the lower dome to LO z tank Station 310 will be tested with LNo at 
-320° F. 


Proof pressure at lower dome equator: p = 38. 8 psi 
* _pR _ 38. 8(198) 

l min - F 61 000 °* 126 m# ^ ower dome equator) 

ty * 

Proof pressure at L0 2 Station 310: p = 32. 2 psi 
. pR 32.2(198) „ 

^mtn F. 61,000 ~ °* 105 in * Station 310 ) 

ty 


Tank skins from the upper dome to L0 2 tank Station 310 will be tested at room 
temperature. 


Proof pressure: p = 21. 5 psi 


min 


pR 21.5(198) 
Fty ~ 51,000 


0. 084 in. 


The drawing skin thickness tolerance is ±0. 015 inch for nominal thicknesses less than 
0. 100 inch and ±0. 010 inch for 0. 100 and over. A minimum thickness of 0. 084 inch 
would require a callout of 0. 099 ±0. 015 because it is less than 0. 100. A callout of 
0. 100 ±0. 010 will be used, giving a minimum skin thickness of 0. 090. 
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The critical ultimate load intensities in 
the liquid oxygen tank shell at eight points 
around the circumference of the tank, as 
shown in the accompanying sketch, are 
given in Table 3-1. 

The baseline stringers have a tee cross- 
section and are integral with the 2219-T87 
skin. Stringers are not critical for ten- 
sion loading. The maximum longitudinal 
compression load in the LO 2 tank wall is 
N x =-985 lb /in ultimate , which is pro- 
duced by the liftoff +1 hour ground head- 
winds condition* 


Table 3-1. L0 2 Tank Critical Ultimate (FS U = 1. 4) Load Intensities 


xauit; 0 - 

-j.. 

Station 
(in. ) 

N 1 

xl 

(lb/in) 

N & N 
x2 x8 

(lb/in) 

N x3 &N *7 

flb/in) 

N . & N 
x4 x6 

(lb/in) 

N X5 

(lb/in) 

Tension 

1481 

1600 

1750 

1864 

2654 (12) 
2765 (12) 
2943 (12) 
3098 (12) 

2583 (12) 
2658 (12) 
2778 (12) 
2883 (12) 

2425 (25) 
2425 (25) 
2425 (25) 
2425 (25) 

2425 (25) 
2425 (25) 
2569 (8) 
2674 (8) 

2425 (25) 
2425 (25) 
2887 (8) 
3064 (8) 

1 

Compression 

1481 

1600 

1750 

1864 

-350 (6) 
-682 (4) 
-985 (4) 

-233 (6) 
-480 (19) 
-702 (6) 

-375 (22) 

-214 (15) 

-440 (15) 


( ) Indicates condition number. 


Z 



Section Data: 

Stringer At = 0. 0216 inch 

F = 8000 psi 
c 

l/ = 70 inches 

N = -997 lb/in minimum allowable 
X 

The same stringer section is used for all of 
the tank. A plot of skin thickness, tg, and 
equivalent plate stringer thickness, t, is 
presented in Figure 3-1. 


t -j °- 8 1— 


0.110 


2.0 


1 


■0.110 

t (0.100 MIN) 

S 


± 


j 

Plate -Stringer Section 
(Stringers are spaced at 
12. 0 inches on centers) 




3. 1. 2 LQ 0 TANK WEIGHT SENSITIVITY TO FACTOR OF SAFETY PERTURBATIONS. 
The results of weight sensitivity analyses for perturbations in ultimate and yield fac- 
tors of safely are presented in this section for the liquid oxygen tank. All elements of 
the liquid oxygen tank except the orbiter support bulkhead at Station 1866 were included 
in the analysis. The curves presented, in general, show the variation of weight as a 
function of ultimate factor of safety (FS U ) assuming ultimate design is critical. The 
figures also give cutoffs for certain yield factors of safety (FSy), assuming yield de- 
sign is critical, and for proof design for a service life of 100 missions and a scatter 
factor of 1.5. 

3. 1. 2. 1 Forward and Aft LQ 0 Tank Domes. Figures 3-2 and 3-3 present the weight 
sensitivities of the LO 2 tank forward (upper) and aft (lower) dome assemblies to factor 
of safety perturbations. The curves labeled ULTIMATE DESIGN are based on the 
assumption that the design of the domes is critical for the ultimate strength of the 
material when loaded by FSy multiplied by the limit operating load. The two cutoffs 
for FSy = 1. 0 and 1. 1 are based on the assumption that the design of the domes is 
critical for the yield strength of the material when loaded by FSy multiplied by the limit 
operating load. The cutoff for proof design establishes the baseline weights for the 
domes, and is shown in these figures for comparison purposes. The proof design cut- 
offs are determined by application of a proof factor to limit operating loads, and then 
designing the structure to withstand this load without yielding. The proof test at this 
load then guarantees a 100 mission safe-life for flaw growth at a scatter factor of 1. 5. 
The proof factor, a , is 1. 23 for the liquid oxygen tank. The baseline weight for the 
forward dome is 1715 pounds, and for the aft dome it is 2998 pounds. 

3. 1. 2. 2 LO<> Tank Skins . The weight sensitivity of the liquid oxygen tank skin to factor 
of safety perturbations is presented in Figure 3-4. Weights for the skin were determined 
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FORWARD DOME ASSEMBLY WEIGHT (pounds) 



ULTIMATE FACTOR OF SAFETY, FS^ 


1.2 1.3 I.'l 

ULTIMATE FACTOR OF SAFETY, FS u 


Figure 3-2. Forward L0 2 Tank Dome As- Figure 3-3. Aft L0 2 Tank Dome Assembly 
sembly Weight Sensitivity to Weight Sensitivity to Factor 

Factor of Safety Perturbations of Safety Perturbations 

in the same manner as for the domes (Section 3. 1.2. 1), except that for proof design, the 
proof pressure varies along the length of the tank due to the planned three-phase proof 
test. The baseline weight of the skin, as required for proof, is 5616 pounds. 

3. 1. 2. 3 L0 0 Tank Stringers. The weight sensitivity of the liquid oxygen tank stringers 
to factor oT safety perturbations is presented in Figure 3-5. The upper curve in that 
figure is based on a skin designed by proof pressure for a safe-life of 100 missions an 

a scatter factor of 1. 5, and constant section stringers designed for the maximum com 
pression in the tank. The two lower curves give the stringer weight based on the design 
of the stringers for the actual maximum compression load at a given station. e U P^ 
curve of these two is based on the skin being designed for the same factor of safety as , 

the stringers, whereas the lower curve uses a skin designed for proof pressure just af 
the curve for constant section stringers does. The baseline stringer weig t is poun s. 

3. 1.2. 4 Liquid Oxygen Tank. The weight sensitivity of the liquid oxygen tonk to fac- 
tor of safety perturbations is presented in Figure 3-6. The curve labeled ULTIMATE 
DESIGN is based on the design of all L0 2 tank elements for the ultimate streng o 
the material when loaded by FS U multiplied by limit operating load. The two curves 
labeled YIELD DESIGN for FSy= 1. 0 and 1. 1 are based on the design of all L 2 
elements except the stringers for the yield strength of the material when loaded 1 by FSy 
multiplied by the limit operating load. The stringers are not critical for yield design, 
and therefore the weight of the stringers on the yield design curves increases with 


3-6 











5600 

c 

UTOFF FOR 

3 ROOF DESI 

H 

■ 

i 

560 0 





a 

1 




■ 

/ 



5000 



H 

^ UL1 

IMATE DESI 

JN 

4800 

4600 

44ft fi 

FS y“ 1-1 \ 

\ , 

■ 




\ YTEL] 
/ DESK 

/ J 

a 





n 

/ 













1.2 1.3 1.4 1.5 1.0 1.7 


ULTIMATE FACTOR OF SAFETY. FS U 

Figure 3-4. L0 2 Tank Skin Weight Sensi- 
tivity to Factor of Safety 
Perturbations 



Figure 3-6. LO 2 Tank Weight Sensitivity to 
Factor of Safety Perturbations 



Sensitivity to Factor of 


Safety Perturbations 


as is indicated by the slope of the curves, 
which is in contrast to the horizontal cut- 
offs in Figures 3-2 through 3-4. The 
upper two curves in Figure 3-6, includ ing 
the one which goes through the baseline 
weight point, are based on proof design 
for the end domes and skin. The curve 
through the baseline weight point, in addi- 
tion, uses stringers designed for the 
maximum compression anywhere within 
the tank, whereas the lower of the two 
curves uses stringers designed for the 
maximum compression at a particular 
tank station. The baseline L0 2 tank 
weight is 15, 127 pounds. This weight 
excludes the weight of the Station 1866 
orbiter support bulkhead, which was not 
included in the study of the L0 2 tank. 
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3. 2 LIQUID HYDROGEN TANK 

v 9 i j,H„ TANK STRUCTURAL SIZING . The LH 2 tank is critical for the pressure, 
aiw, and shear loads presented In Section 2. 6. Sizing of the various structural ele- 
ments of the tank and the sensitivity of their weights to factor of safety perturbations 
are presented in the following paragraphs. 

3 2 1 1 LH2 Tank End Domes. Upper and lower LH 2 tank end domes have been sized 
for both ultimate design and proof test. Dome sizing and calculation of weights was 
performed by means of a propellant tank dome synthesis computer program (Reference 
12). This program was also used to size LOg tank domes. 

Dome structural material is 2219-T87 
aluminum alloy with the following proper 
ties at room temperature : 

F tu = 63 * 000 P si 
F t = 52,000 psi 

Design conditions are: 

Ultimate design, FS^ = 1.4. 

Upper dome pressure = 22. 3 psi 

Lower dome pressure = 26. 4 psi 

Proof pressure test design 
(proof factor, a = l. 13) 

Upper and lower dome pressure = 26. 4 (1. 13) = 29. 8 psi 
Results of this analysis are shown in the accompanying sketch. ?; 

The results indicate that the forward (upper) LH 2 tank dome is critical for proof pres- 
sure, while the aft (lower) dome U critical for ultimate pressure. 

rt O 1 O T M-. Tank Plate-Stringers and Be lt Frames . Plate-stringers for the LH2 tank 
Lv/beenllzed to carry tank pressures and fusel^ external loads. The des.gn criteria 
^ present L Section 2 were followed In establishing factors of safety, mml- 

mum skin thickness for pressure design, and minimum thickness for stability design. 

Plate-stringer and belt frame configurations were optimized for axial loads with the 
following constraints: 


[ lh 2 tank end dome skin thicknesses, in. 

FORWARD DOME ! 

AFT DOME 

PROOF 

t-rt 

ULTIMATE 

t=rt 

PROOF 

T=RT 

ULTIMATE 

T-RT 

0.061 

0.066 

0.073 

0.080 

0.053 

0.057 

0.063 

0.069 

0.061 

0.060 

0.073 

0.080 

0.063 

0.068 

0.074 

0.082 


a. 


Minimum skin required for pressure and/or shear. 
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THICKNESS, t (inches) 


b. Minimum stringer spacing for machining. 

c. Maximum stringer height limited by available plate thickness. 

Optimum frame spacing was determined for two basic integral stiffener configurations, 
tee and blade, by selecting average compressive load intensities and optimum stiffeners 
for various effective column lengths. Belt frame required moments of inertia were 
calculated by the Shanley criterion, which gives stiffening requirements for the pre- 
vention of shell general instability (Reference 13). 

/C f Tt D 4 

%-M-! nr 


Frame cross-sectional areas were calculated for 9. O-inch-deep frames with truss 
webs that would have the required moment of inertia. Effective thickness ( t) was cal- 
culated for each configuration and plotted as shown in Figure 3-7. As a result of this 
study, integral stiffeners with an effective column length of 60 inches were selected 
for detailed sizing. 

Various sizes of integral stiffener were analyzed to determine the effect of stringer 
spacing and height for several minimum skin thicknesses. As a result of this study, 
a stiffener spacing of 4. 0 inches was selected for the LH 2 tank. 

Detailed sizing of the plate-stringer includes the effects of internal pressure, axial 
load, and shear. Minimum skin thickness was determined for pressure design (ultimate, 



Figure 3-7. LH 2 Tank Plate -Stringer Effective Thickness Versus Frame Spacing 
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yield, and proof test), shear (principal stress), and axial load. Sizing of ^ 
iZe^d by axial loads in determining optimum plate-stringer ^es tor ^mmum 
lliht to carry biaxial load and not exceed the allowable shear strength of the skin. 

Four sections of the LH 2 tank were selected for detailed analysis of a clean structure. 
The effect of concentrated loads was calculated separate y. 

Loads for the selected stations are presented in Table 3-2. A typical analysis Is pre- 
sented and the final plate stringer sizes are in Table 3-3. 


Material: 2219-T87 plate, 3 inches thick 
Room temperature properties 

Ftu = 63 ksi E c 

F ty = 51 ksi w 


= 10. 8 (10) 6 psi 
= 0. 102 lb/in 3 


F su = 38 ksi 


Allowable working tension stress at limit pressure 

Ultimate design = 45. 0 ksi (1. 4 ultimate factor) 


Yield design = 46. 4 ksi (1. 1 yield factor) 

X* -L 

Proof design = 45. 1 ksi (1. 13 proof test factor) 


For pressure design the tank skins are ultimate 

the tank will be determined by ultimate design pressure and proof pressure. ine p 
pr^ssurete the maxlm um pressure In the tank multiplied by tee proof test factor of 

1. 13. 


Maximum tank pressure is at the lower dome apex (26. 4 psi). 
Proof pressure = 26. 4 (1. 13) = 29. 83 psi 

Maximum tank pressure in constant section: p - 25. 5 psi. 


The tank constant section is proof test critical 

_pR_ = 29 . 83 ( 198 ) -= 0>116inch 
l min p. 51,000 

Drawing callout = 0. 126 ±0. 010 inch 

Stability design t = 1. 05 (0. 116) = 0. 122 inch 
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Table 3-2. LH 2 Tank Critical Design Loads (Ultimate) 


a. Ultimate Axial Load Intensities 



Bottom 

Bottom Side 

Si 

ide 

Top Side 

To] 

P 

Station 

N x 

q 

c* 

N x 

q 

B 

N x 

q 

B 

N x 

q 

C 

N x 

q 

C 

mi 

-4167 

0 

fl 

-4072 

49 

4 

-6062 

6 

6 

-8803 

5 



0 

10 

EH 

-6327 

0 

1 

-5614 

222 

7 

-6138 

319 

6 

-8485 

624 


BMjn 

0 

10 

3161 

-7269 

0 

1 

-6380 

228 

B 

-6401 

346 

6 

-7817 

700 


KjSpf 

0 

10 

3377 

-8055 

0 


-7006 

66 

B 

-6536 

362 

6 

-7479 

743 

_ii 

-8,349 

0 

10 


b. Ultimate Hoop Load Intensities 


Station 

Condil 

don 4 

Condil 

ion 6 

Condil 

tion 7 

Condition 10 

Press 

KB 

Press 

Ny 

Press 

Ny 

Press 

N y 



2356 

2633 

3049 

3326 

fl 

2356 

2633 

3049 

3326 

27.3 
27.3 
28.7 
30. 1 

5405 

5405 

5683 

5960 

31.2 

31.2 

31.2 

32.2 

6178 

6178 

6178 

6376 


* C = Condition number, see Section 2. 6. 


Table 3-3. LH 2 Tank Plate Stringer Sizing 

Material: 2219-T87; Stringer Spacing: 4.0 inches on centers; 

Stringer Height: 3. 0 inches 


Sta 2182 2400 2800 3161 3377 3681 




^t =0. 122 
s 

t =0. 175 

^ tg = 0. 140 
t =0.200 

^-t s = 0. 150 
t =0.220 

^-t s = 0. 150 
t =0.236 

Bottom <£ 

Bottom Side 

Side 

1 

Top Side 


^-t g = 0. 122 
t =0.174 

f - tg = 0. 130 
t =0.192 

tg = 0. 140 
t =0.206 

tg = 0. 150 
t =0.212 


r t g =0. 140 
t =0.190 

^~t g = 0. 140 
t = 0. 193 

^-t s = 0. 140 
t =0.207 

/-tg = 0. 150 
t =0.204 


t g = 0. 160 

t =0.242 

■ ■ 

/-t s = 0. 160 
t =0.240 

^-tg =0. 150 
t =0.236 

^t s = 0. 150 
1 t = 0. 223 


r-tg =0. 170 

/ t =0.292 

r~ t s = 0. 170 
1 t =0.276 

r- tg=0. 160 

/ t =0.252 

l~t s = 0. 160 

1 t =0.246 







Top £ 


Note: 1. t s is skin thickness for stability design. 

2. t is the equivalent thickness of skin and stringers. 

3. Thickness shown does not include effects of local loads. 
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Typical Plate Stringer Analysis - Section at Station 2800: 

Tank Bottom Centerline: 

Ultimate loads: N x = -6327 lb/in; N y = 5405 lb/in; q = 0. 

Section Data: 

t =0. 140 inch 
s 



Plate-Stringer Section 
(Stringers are 4. 0 inches on Centers) 


t = 0. 200 inch 

F c = 33,500 psi (L 7 = 60) 

F = 38,000 psi 
su 

Note: Thickness shown is for stability 
design: 1. 05 x t min 

for pressure t g = °*. Q5 = 133 inch 


6327 


Compressive stress: f, - 0>2 oo 31,630 psi 

Tensile stress normal to compressive: fj. = — l33 - 40 , 700 psi 

Maximum shear stress: 


f, = 

Sp 


V 2 / s 


1/2 


f„ = 37,000 psi 
®P 


M. S. = -1 - + 0. 05 (compression) 

38,000 _ +0 02 (shear) 

M * 0, 37,000 
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Plate-stringer compression allowable: 
Frame spacing is 66. 7 inches 
Column fixity is 1. 5 


p = 1. 014 inch 


, 66. 7 

TT " 54 ' 6 


F c = 37,600 psi 

f c = S = 37 ' 5 ° 0pSi 


„ „ 37,600 

M,S * 37,500 _1 _+0, ° 

Maximum skin shear: (nominal section) 
pR 

f ==-— = 38, 000 psi 

l 1 
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N x 

£ c =— = 35,000 psi 
t 


f s =y = 3880 psi 


3 max 




= 36,500 psi 


38, 000 = +Q Q4 

’ * 36,500 


LH 2 Tank Belt Frames: 

Frames sized by Shanley criterion: 
fC f 77 D 4 


T = N 

f x \ 4LEf 


Typical frame analysis: 

Design load intensity: N x = -8000 lb/in 

Frame spacing: L = 60 inches 

Tank diameter: D = 396 inches 

“6 

Coefficient: Cf = 62. 5 (10) 

8000(62. 5) (10)" 6 17 (396) 4 _ - =-4 

Solution: If Z ' 

4(60) (10. 3) (10) b 


; I f = 15. 63 in 


ae section: 

Frame depth: d = 9 inches 

. A -2L . A = 2 ^ 15, 6 — = o. 408 in 2 /cap 

Required cap area. A ~ 2 ’ A /Q n ^2 

U (O. (O) 


Effective depth: d e = 8. 75 

Equivalent web thickness of the truss: V = 0. 06 

r 2 ( 0 . 408 ) +9(0.060)] = 3 lnch 

Frame At: At - • ' go 
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3. 2. 2 LH 2 TANK WEIGHT SENSITIVITY TO FACTOR OF SAFETY PERTURBATIONS. 
The results of weight sensitivity analyses for perturbations of ultimate and yield factors 
of safety are presented in this section for the liquid hydrogen tank. Analysis was per- 
formed for the forward and aft dome assemblies, the cylindrical section skin -stringer, 
the belt and TPS support frames, and the LH 2 tank as a whole. The curves presented, 
in general, show the variation of weight as a function of ultimate factor of safety (FS ) 
assuming ultimate design is critical. The figures also give cutoffs for certain yield U 
factors of safety (FSy), and for proof design for a service life of 100 missions and a 
scatter factor of 1. 5. 

3 * 2 * 2 * 1 Forward and Aft LH ? Tank Domes . Figures 3-8 and 3 -9 present the weight 
sensitivities of the LH 2 tank forward (upper) and aft (lower) dome assemblies to factor 
of safety perturbations. The curves labeled ultimate design are based on the assump- 
tion that the design of the domes is critical for the ultimate strength of the material 
when loaded by FSy multiplied by the limit operating load. Cutoffs for FSy = 1 . 0, 1 . 1 , 
and 1. 2 are based on the assumption that the design of the domes is critical for the yield 
strength of the material when loaded by FSy multiplied by the limit operating load. The 
cutoff for proof design establishes the baseline weight for the forward dome, and is 
shown in Figure 3-8 for comparison purposes. 


The proof design ctuoff is determined by application of a proof factor to limit operating 
loads, and then designing the structure to withstand this load without yielding. The 
proof test at this load then guarantees a 100 mission safe-life for flaw growth at a 
scatter factor of 1. 5. The proof factor, Of, is 1. 13 for the liquid hydrogen tank. The 
aft LH 2 tank dome is critical for ultimate operating pressure. Resizing of the end 
domes for perturbations of the factors of safety was accomplished by use of the com- 
puter program that was also used for the baseline sizing of the dome. The baseline 
weight for the forward LH 2 tank dome is 2483 pounds, and for the aft dome it is 2468 
pounds. 


3 * 2 * 2 * 2 Belt Frames and TPS Support Frames . The weight sensitivity of the LH 2 
tank stabilizing belt frames and TPS support frames to factor of safety perturbations 
is given in Figure 3-10. Frame weight for the curves of Figure 3-10 was determined 
by means of a computer sizing program that uses the Shanley criterion (Section 3. 2. 1. 2) 
and the maximum axial compression load at a station for a particular factor of safety. 
One point should be clearly understood when reading the curves of Figure 3-10. This 
point is that for these curves the factor of safety, FS U , varies only for the load condi- 
tions for which the particular curve is so labeled. On that same curve the factor of 
safety, FS U , for other load conditions is held constant at the baseline value. The 
curve with the highest slope, which is labeled ALL LAUNCH VEHICLE TYPE CON- 
DITIONS (EXCLUDES CONDITIONS 13, 14, 15, 16, 23, 24) is actually the same as the 
curve that would have been produced had the factor of safety been varied for all 25 load 
conditions investigated. The reason is that the launch-vehicle-type conditions are so 
much more critical to the LH 2 tank structure than the aircraft-type load conditions 
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Figure 3-10. Belt Frames and TPS Support Frames Weight 
Sensitivity to Factor of Safety Perturbations 
for Selected Load Conditions 
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(13, 14, 15, 16, 23, 24) that even when the factor of safety on the launch-vehicle-type 
conditions was reduced to very low level, the aircraft-type load conditions were still 
not critical even with their high baseline factor of safety of 1. 5. This curve therefore 
provides the overall weight sensitivity to factor of safety perturbations, and also pro- 
vides a basis for comparison for the other curves presented in the figure. 

Examination of Figure 3-10 reveals that that 3g maximum thrust condition (10) is the 
most critical condition for the stabilizing belt frames and TPS support frames and thus 
reduction of on this condition provides the greatest opportunity for weight savings, 
if it is not desired to alter FSy on all conditions simultaneously as is illustrated by the 
curve labeled ALL LAUNCH VEHICLE TYPE CONDITIONS. On the other extreme, the 
figure shows that alteration of FS U on the liftoff plus winds load conditions (4,5,6) pro- 
duces no weight change for the frames except for large values of FS U . It will be noted 
that the curves for maximum ceq plus winds (7,8,9) and 3g maximum thrust (10) re- 
main constant for lower values of FS U . This occurs because FS U is being pe rturbated 
only for a load condition or group of load conditions at one time; thus, when the curve 
becomes constant below a certain FS U , it means other conditions that still have FS U at 
the baseline become critical. The baseline weight of the frames is 4167 pounds. 

3. 2. 2. 3 LHo Tank Skin-Stringer. The weight sensitivity of the liquid hydrogen tank 
skin-stringer to factor of safety perturbations is presented in Figure 3-11. Skin- 
stringer weights for the curves of Figure 3-11 were determined by means of the same 
computer sizing program used to size the baseline vehicle. In most areas the skin is 
designed by flight axial and shear loads. In locations where operating loads are low, 
however , the skin thickness is determined by proof pressure. In this case the proof 
pressure is determined by the requirement for a 100 mission service life with a scatter 

factor of 1. 5. 

Inspection of Figure 3-11 reveals that comments made in Section 3. 2. 2. 2 for the belt 
and TPS support frames also apply to the skin-stringer structure, for the most part. 
However, the weight sensitivity of the skin-stringer is not as heavily influenced by 
individual conditions. Cutoffs are given where yield design is critical. For the range 
of safety factors investigated, FSy = 1. 1 through 1. 6 and FS y = 1. 0 through 1. 2, yield 
design is critical only for FSy > FS U . The cutoffs shown in the figure are for FSy - 
1. 2. The baseline weight of the LH 2 skin-stringer is 52,486 pounds. 

3. 2. 2. 4 Liquid Hydrogen Tank. The weight sensitivity of the entire liquid hydrogen ' 

tank to factor of safety perturbations is presented in! Figures 3-12. Curves are pre- 
sented in Figure 3-12. Curves are presented in this figure for all of the critical design 
conditions and for FSu = 1. 1 through 1. 6 and FSy = 1. 0 through 1. 2. All LH 2 tank ele- 
ments discussed in Sections 3. 2. 2. 1 through 3. 2. 2. 3 and presented in Figures 3-8 
through 3-11 are included in Figure 3-12 with the addition of the orbiter support frames 
at Stations 2666 and 2866 and the associated tank beef-up required. For the curves of 
Figure 3-12, the forward tank dome assembly is designed by proof pressure for a 100 
mission service life and a safe -life scatter factor 1. 5; therefore, its weight does not 
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57,000 


56,000 


1*55,000 


E-i 

§ 54,000 


NOTES: 


1) THESE CURVES APPLY 
FOR FS = 1.0 THRU 1.2 
|2) LIFE SCATTER 
FACTOR = 1. 5 
1 3) MINIMUM t H = 0.122 


ALL LAUNCH 
VEHICLE TYPE 
CONDITIONS 
.(EXCLUDES 13, 


14,15,16,23,24) 

/ 



3g MAX 


THRUST 

/—(CONDITION 10)1 



48,0001 




/ 


/ 


47,000| 


FOR THESE CURVES, THE FACTOR 
OF SAFETY IS VARIED ONLY FOR 
THE LOAD CONDITIONS FOR WHICH 
"THE PARTICULAR CURVE IS LABELED. 
THE FACTOR OF SAFETY FOR OTHER 
CONDITIONS IS HELD CONSTANT AT 
THE BASELINE VALUE. 


1.1 


1 * 2 1.3 1.4 1.5 1.6 

ULTIMATE FACTOR OF SAFETY, FS 


u 


Figure 3-11. LH 2 Tank Cylindrical Section Skin-Stringer 
Weight Sensitivity to Factor of Safely Per- 
turbations for Selected Load Conditions 
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74, OOOr 


NOTES: 

1. THESE CURVES APPLY FOR 
FS y = 1.0 THRU 1.2 


2. LIFE SCATTER FACTOR = 1.5 


72, 000 


ALL LAUNCH VEHICLE 
TYPE CONDITIONS * 

(EXCLUDES 13, 14, / 

15, 16, 23, 24) 



'FSy = 1.0 


60, 000 


FOR THESE CURVES, THE FACTOR 
OF SAFETY IS VARIED ONLY FOR 
THE LOAD CONDITIONS FOR WHICH 
THE PARTICULAR CURVE IS LABELED-! 
THE FACTOR OF SAFETY FOR OTHER 
CONDITIONS IS HELD CONSTANT AT 
HE BASELINE VALUE. 


1.1 


1.2 1.3 l* 4 1,5 

ULTIMATE FACTOR OF SAFETY, FS U 


1.6 


Figure 3-12. LHg Tank Weight Sensitivity to Factor of Safety 
Perturbations for Selected Load Conditions 
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LH 2 TANK WEIGHT (pounds) 


vary with factor of safety although the constant dome weight is included in the curves. 
For the liftoff plus winds curve (4,5,6) the weights of the lower dome and the aft orbiter 
support frames remain constant since they are not sensitive to factor of safety pert r- 
bations for this condition. For some of the load conditions of Figure 3-12, there are 

67 700| | i separate curves for different values of FSy 

for the lower values of FS^. The presence 
of these differences is explained by the fact 
that various elements of the tank are criti- 
cal for yield design when FE^ becomes low 
enough. The baseline weight of the LHg tank 
is 67,645 pounds. 


67. 600 


67, 500 


67,400 


67,300 


67,200 


67, 100 


67, 000 


66, 900 


NOTE: 

FOR THESE CURV 
OF SAFETY IS VA 

THE THRUST ANE 

FOR THE LOAD C 
WHICH THE PART 
IS LABELED. THI 
SAFETY FOR OTH 

ES, THE FACTOR 
RIED ONLY FOR 
DRAG LOADS 


ONDITIONS FOR 
ICULAR CURVE 
FACTOR OF 
ER LOADS ARE 


HELD CONSTANT 
BASELINE VALUE 

AT THE 

wm 



wm 


/ 


MAX aq + WINDS 
(CONDITIONS 7, 8, 




/^UFTOFF + W1 
(CONDITIONS 4 

NDS / 
5, 0)/ 


3g MAX THRUST - 
(CONDITION 10) 

7 


1.1 


1.2 1.3 

ULTIMATE FACTOR OF SAFETY, FS U 
ON THRUST AND DRAG 1-OADS 


1.4 


Figure 3-13. LH£ Tank Weight Sensitivity 
to Reduced FS U on Thrust 
and Drag Loads Only for 
Selected Load Conditions 


Figure 3-13 presents the weight sensitivity 
to factor of safety perturbations on thrust 
and selected critical load conditions. The 
factor of safety is held constant at the base- 
line for all airload and tank pressure loads 
for these conditions. For these same cur- 
ves other load conditions are used with their 
baseline factors of safety. The curves give 
the relative weight effectiveness of reducing 
the factor of safety on thrust loads. This 
type of information is desirable since thrust 
loads are more accurately predicted than, 
say, gust loads so that it is possible to use 
a reduced factor of safety. The service 
life was held constant at 100 missions and 
the safe-life scatter factor at 1. 5 for the 
analysis and therefore the tank skin thick- 
ness did not drop below 0. 122 inch. 


3. 3 AFT ORBITER SUPPORT FRAME 


3.3.1 AFT ORBITER SUPPORT FRAME STRUCTURAL SIZING . The principal aft 
support point of the orbiter to the booster is located at Station 2666. A substantial 
body frame is provided at this station to distribute orbiter loads to the booster body 
shell. Figure 3-14 shows the critical applied loads (ultimate), and Figure 3-15 shows 
the element identification. 


A finite element computer solution was used to size the frame, and the model, geom- 
etry, applied loads, section properties, and internal loads are shown on the following 
pages. The material of the frame is 2219-T87 aluminum alloy. The room tempera- 
ture properties of this material are: 
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477K 


592. 2K 592. 2K 542. 6K 238. 5K 




Figure 3-14. Critical Applied Loads (Ultimate), 
Aft Orbiter Attachment Frame 


Ftu = 63 ksi 


tU 


63 


I -. t* u w A r- 

F t at limit load = ~ ^ ~ 45 


F cy - 5! ksi 


F su = 37 ksi 


To allow for the effects of fastener 
holes, welds, and other strength 
reducers, these properties were 
reduced for member sizing to the 
following values for use with ulti- 
mate loads. 


F t = F c = 50 ksi 


F = 20 ksi 
s 


Table 3-4 lists cap axial loads 
and cross-sectional areas, and 
Table 3-5 lists the web shear 
flows and thicknesses. 



Figure 3-15. Aft Orbiter Attachment Frame 
Element Identification 


Table 3-4. Aft Orbiter Attachment Frame, Cap Axial 
Loads and Cross-Sectional Areas 


Ultimate Axial Loads (kips) 



Length 

Max. 

Max. 0q 


Area* 

Bar 

(inches) 

Oq 

Left 

Right 

(in 2 ) 

1 

40 

-56 

302 

-375 

7.5 

2 

40 

-227 

-234 

-11 

4.6 

3 

50 

-125 

220 

-376 

7.5 

4 

53 

-130 

-180 

87 

3.6 

5 

52 

-223 

-1 

-260 

5.2 

6 

62 

44 

30 

74 

1.5 

7 

117 

-424 

-106 

-373 

8.5 

8 

64 

63 

87 

-161 

3.2 

9 

98 

-110 

-52 

-62 

2.2 

10 

91 

-120 

25 

-185 

3.7 

11 

102 

19 

-5 

33 

0.5 

12 

91 

-82 

-14 

-87 

1.7 

13 

55 

1 

1.7 

0 

0.5 

14 

47 

3 

-7.5 

12 

0.5 

15 

69 

-5 

0.6 

-6.3 

0.5 

16 

57 

15 

-0.5 

22 

0.5 

17 

67 

-6 

-0.9 

-6.4 

0.5 

18 

53 

12 

0. 8 

14. 1 

0.5 

19 

80 

-6 

-2.2 

-4.2 

0.5 

20 

62 

6 

1.1 

5. 6 

0.5 


♦Assume Ft = F c = 50 ksi ultimate 


Table 3-5. Aft Orbiter Attachment Frame, Web 
Shear Flows and Thicknesses 


Web 

Area 

(in 2 ) 

Max. 

aq 

Ultimate Shear Flow (kips/in) 
Max. 8 q 

t* 

(in. ) 

Left 

Right 

1 

722 

i.i 

4.3 

5.7 

0.29 

2 

1493 

1.9 

6.7 

4. 7 

0.34 

3 

2441 

1.8 

2.1 

0. 11 

0. 11 

4 

2048 

7.5 

0.57 

8.4 

0. 42 

5 

1471 

3.5 

1. 00 

2.9 

0.50 

6 

2103 

0.32 

0. 16 

0.66 

0.33 

7 

1631 

0.21 

0 

0.26 

0. 13 

8 

2483 

0. 06 

0 

0.01 

0.04 

9 

2854 

0.01 

0 

0 

0. 04 

10 

3947 

0 

0 

0.01 

0.04 

♦Assume F 

= 20 ksi ultimate 
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3 3 2 AFT ORBITER SUPPORT FRAME WEIGHT SENSITIVITY TO FA CTOR OF 
SAFETY PERTURBATIONS. The results of weight sensitivity analyses for perturba- 
tions of ultimate and yieldlactors of safety are presented in this section for the Station 
2666 aft orbiter support bulkhead. The weight sensitivity curves are presented in Fig 
ure 3-16. The curve marked ULTIMATE DESIGN shows the weight variation of the 
frame for ultimate factors of safety ranging from 1. 1 to 1. 6 for the two critical design 
conditions, maximum aq tailwinds and maximum 0q. The cutoffs labeled YIELD 
DESIGN give the weights for FSy = 1. 0, 1.1, and 1. 2. The baseline weight o t e 
frame is 2450 pounds. 


The broken-line curve running between FSu = 1. 1 and 1. 4 shows the weight sensitivity 
of the frame to the reduction of FS U on thrust loads only (and reacting drag and inertia 
loads) with FSu and FSy remaining at the baseline of 1. 4 and 1. 1 respectively on all 
airloads. The curve reveals that weight is a minimum for FSu = 1. 27 on thrust and 
drag. The reason that the curve changes slope is that while the reduction of thrust 
FS,, relieves loading on the frame for maximum aq plus tailwinds, the maximum 0q 
condition becomes more critical for the frame as thrust. FS U is reduced. As a result 
the point at which optimum weight is reached is at FS U = 1. 27. 

















3. 4 THRUST STRUCTURE 


3. 4. 1 THRUST STRUCTURE STRUCTURAL SIZING . A finite element model was 
utilized to determine the theoretical weight of the thrust structure. The idealized 
model and geometry is shown in Figures 3-17. Figure 3-18 shows thrust structure 
model elements. 


A total of 14 basic loading conditions were initially investigated, plus one or two engine 
failures for the flight conditions. By assuming an identical structural configuration in 
each 45-degree segment of the thrust structure model, the number of possible loading 
combinations with engine failure was reduced. For one engine failed, one of the four 
inner engines or one of the eight outer engines was considered failed — reducing the 
number of combinations from 12 to 2. For two engines failed the number of combi- 
nations was reduced from 66 to 12. The thrust structure load conditions are: 


1. One hour ground headwinds 

2. One hour ground tailwinds 

3. One hour ground sidewinds 
Conditions 4 through 11 were run with: 

a. No engines out. 

b. With one engine out. 

c. With two engines out. 

4. Liftoff plus one hour ground headwinds 

5. Liftoff plus one hour ground tailwinds 

6. Liftoff plus one hour ground sidewinds 


7. Maximum aq with headwinds 

8. Maximum aq with tailwinds 

9. Maximum j8q 

10. Three g maximum thrust 

11. Booster burnout 

17. One day ground headwinds 

18. One day ground tailwinds 

19. One day ground sidewinds 


A computerized analysis was made with these loading conditions. From the resulting 
internal loads it was determined that only seven loading conditions were critical for 
design. Conditions eliminated did not occur in the maximum/minimum search or were 
slightly critical in only a few areas; consequently, these conditions have a negligible 
effect on the overall results. The critical conditions are as follows: 

7 Maximum a q headwinds 

7 IE Maximum aq headwinds (inner engine failed) 

7 OE Maximum aq headwinds (outer engine failed) 

10 Three g maximum thrust 

10 IE Three g maximum thrust (inner engine failed) 

10 OE Three g maximum thrust (outer engine failed) 

19 One day ground sidewinds 
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Figure 3-17. Thrust Structure Finite Element Model 
















Ultimate applied loads are shown in Table 3-6. Table 3-7 lists the element number, 
maximum load, cross-sectional area and thickness, applied and allowable stress, and 
element weight based on the material properties given below. 

As noted in Section 2. 3, the structural members of the thrust structure are of T1-6A1-4V 
annealed titanium, having the following room temperature properties: 


F = 130 ksi (Reference 9) 
tu 

F 

F t at limit load = j-— ■ = = 82 * 86 ksi 

F cy = 126 ksi 
F gu = 76 ksi 


Table 3-6. Thrust Structure Ultimate Design Loads 


HOLDDOWNS {<) 



Ultimate Loads (pounds) 


Conditions 


19 1 Day Ground Sidewinds 


7 Maximum alpha-q Headwinds 


Maximum alpha-q Headwinds (Inner Engine Out) 


7 OE Maximum alpha-q Headwinds (Outer Engine CXit) 

10 3g Maximum Thrust 

10 IE 3g Maximum Thrust (Inner Engine CXit) 

10 OE 3g Maximum Thrust (Otter Engine Out) 


Px 

1,065,367 

1,065,537 

2,467,059 

2,466,889 

809,000 


882,610 


882,610 


920,990 

1,004,700 

1,004,700 


p y 

Pz 

Locations 

-38,280 

4,202 

104 

-104,926 

4,212 

110 

-104,926 

70,858 

116 

-38,280 

70,858 

122 


-187,920 

32,36,38,42,44,48,50,54.74,76,78.80 

185,610 

508,470 

109 

46,300 


112 

-185,610 

508,470 

117 


-205, 000 

32,36,38,42,44,48,50,54.74,78,80 

185,610 

508,470 

109 

46,300 


112 

-185,610 

508. 470 

117 


-205,000 

32,36,38,44,48,50,54,74,76,78,80 

185,610 

508,470 

109 

46,300 


112 

-185,610 

508,470 

117 


-67,680 

32,36,38,42,44,48,50,54,74,76,78.80 


-73,832 

32,36,38,42,44,48,50,54,74,78,80 


-73,832 

32,36,38,44,48,50,54,74,76,78,80 
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Table 3-7. Thrust Structure Model Element Loads, Areas, Thicknesses, Stresses, and Weights, Contd 
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Thrust Structure Model Element Loads, Areas, Thicknesses, Stresses, and Weights, Contd 
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tg and tw were determined through the utilization of a plate-stringer optimization program. 



3.4.2 TITPTT™ STRUCTURE W ^ 1G » T f m^I i^Slnr^ 

TUHBATIONS . The weight sensitmty of t BjUto ^ curve labele d ULTIMATE 

factor of safety is presented in gur weight to FSu for the assumption that 

DESIGN in Figure 3-19 of the material 

structural members are des g opera ting load. The cutoffs labeled YIELD 

when loaded by FSu multiplie y members are critical for the yield allow- 

DESIGN are based on the assumption th l ad Weights for yield design 

able when loaded by ^mumpUedby » ^ ^ struck is 25,067 

are given tor r »y - ± 

pounds. 

~ - w — « - r, rrrrr sstsita rr rx 

«;.r JSXKXi ii.' — --str,.—. 1 “ 

rsrr - - — 

weight changes can be obtained by varying FS U on thrust. 
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Figure 3-20. Thrust Structure Weight 
Sensitivity to Perturbation 
of FSu for Thrust Loads 
Only 
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3. 5 WING BOX 


3 * 5* 1 WING BOX STRU CTURAL SIZING. Primary structural components such as 
spars and ribs are sized by maximum aq loads during boost (Condition Wl). This 
condition is critical because it combines high air loads and low relieving inertia loads. 
A finite element solution was programmed using a structural simulation model consist- 
ing of 156 nodes and 1073 constant stress elements, as shown in Figure 3-21. Skin 
corrugations were simulated in shear with quadrilateral plate elements. Orthotropic 
triangles with negligible shear stiffness were superimposed to simulate the unidirec- 
tional extensional stiffness of the skins. Spar cap loads obtained from the computer 
solution are tabulated in Table 3-8 for Condition Wl and spar sizing data is presented 
in Tables 3-9 through 3-13. 


ss ss 



B-9U space shuttle wing box simulation node points 
for upper surface. Add "1" to the upper surface nodes 
to obtain the node numbering for the lower surface. 

Figure 3-21. B-9U Wing Structural Simulation Model 


3-35 



Table 3-8. Spar Cap Loads, B-9U Wing 


Ep r p 5 
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Table 3-9. Sizing Data — Spar No. 1 (WS 515), B-9U Wing 


SS 

A c 

w 

*0 

W u 


W d 


327 

3. 56 

4. 08 

0.218 

2. 09 

0. 074 

4.14 

0. 036 

267 

5. 19 

4. 54 

0. 285 

2.64 

0. 099 

4.39 

0. 055 

207 

6. 56 

4.86 

0. 338 

3.88 

0. 18 

4. 62 

0.075 

163 

6.84 

3.90 

0.44 

3.25 

0. 107 

3.77 

0. 034 

120 

7. 06 

3.93 

0. 45 

3.50 

0.11 

3. 68 

0. 023 

60 

7.30 

4.81 

0.38 

2.96 

0. 081 

4. 23 

0.016 

0 

7. 50 

4. 84 

0.387 

2. 48 

0.060 

4. 14 

0.016 


A c = Spar cap area (in 2 ) 

W c = Spar cap width (in. ) 
t c = Spar cap gage 
W u = Spar upright width (in. ) 
t u = Spar upright gage (in. ) 
W d = Spar diagonal width (in. ) 


t d = Spar diagonal gage (in. ) 
t^ = Spar shear web gage 
R = Spar shear web corrugation radius (in. ) 
tf = Spar shear web support cap gage (in. ) 
SS = Spanwise station 


t , t . 
u d 



SPAR DIAGONAL 
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Table 3-10. Sizing Data - Spar No. 2 (WS 633), B-9U Wing 


ss 

A c 

W c 

t C 

w u 

W d 

l d 

507 

2.35 


0. 153 

2. 50 0. 093 

4. 04 

0. 041 

447 

4. 05 

4.37 

0.232 

2.61 0.103 

4. 29 

0. 067 

387 

5. 92 

4.82 


3. 15 0. 129 

4.54 

0.095 

327 

7.45 


0.365 

3. 5 0. 144 

4. 73 

0. 109 

267 

8. 78 

5.32 

0.411 

3.81 0.158 


0. 122 

207 

9.44 

5.42 

0.437 



0. 129 

163 

9.62 

4.32 

0. 555 

4. 13 0. 147 


0. 056 


9. 75 

4.33 

0.562 

4.40 0.145 


0. 038 


9.86 

5.26 

0.467 

3. 64 0. 107 

4. 52 

0.019 

P 

Q ft7 

5.26 

0. 467 


4.37 

0.016 


Table 3-11. Sizing Data — Spar No. 3 (WS 751), 

B-9U Wing 

SS 

A c W c 


w 

u 

tu w d *d 


R tf 

627 

2.54 3.92 

0. 162 

1. 98 

0. 085 4. 07 0. 124 



567 

3.64 4.42 

0. 206 

2. 82 

0. 125 4. 24 0. 118 



507 

5. 09 4. 80 

0. 264 

4.27 

0.187 4.42 0.101 

0. 095 

3. 18 0.238 

447 

6. 83 




0. 106 

3.50 0.25 

387 

8.48 




0. 115 

3.76 0.25 

327 

9. 92 




0. 12 

3.98 0.25 

267 

11. 02 5. 69 

0. 485 

4. 46 

0. 194 5. 19 0. 172 

0. 124 

4. 16 0. 25 

207 

11.68 5.78 

0. 505 

5. 85 

0. 254 5. 33 0. 177 



163 

11. 80 4. 59 

0. 643 

4. 77 

0.177 4.51 0.077 



120 

12.07 4.61 

0. 654 

5.1 

0.177 4.38 0.052 

0. 040 

2. 78 0. 10 

60 

12. 17 




0. 032 

2.45 0.08 

0 

12. 22 




0. 020 

2. 00 0. 05 
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Table 3-12, Sizing Data - Spar No. 4 (WS 941), B-9U Wing 


ss 

A c w c *c 

W u 

*u 

w a *d 

V 

R tf 

861 

o. 12 1. 05 0. 029 

1 

0. 025 

1 0. 025 



801 

0. 22 1. 61 0. 034 

1.5 

0. 062 

3.01 0.029 



762 

1.41 3.01 0.117 

1.9 

0. 049 

3. 12 0. 064 



731 

1.82 2.42 0. 188 

2. 08 

0. 096 

2. 17 0. 085 



687 

2. 30 3. 54 0. 163 

2.21 

0.113 

3.32 0.133 



627 

3.50 4.36 0.200 

2.53 

0.117 

4. 07 0. 124 



567 

3.66 4.41 0.205 

2.81 

0. 124 

4. 24 0. 116 



507 

4. 26 4. 55 0. 234 

2. 43 

0. 090 

4.42 0.101 

0. 080 

2. 82 0. 199 

447 

5. 17 




0. 080 

2.90 0.200 

387 

6. 02 




0. 081 

3. 00 0. 203 

327 

6.79 




0. 082 

3. 09 0. 205 

267 

7. 49 5. 07 0. 37 

3.41 

0. 137 

4. 72 0. 096 

0. 084 

3.21 0.211 

207 

7. 86 5. 13 0. 383 

4.40 

0.176 

4.81 0.098 



163 

8. 27 4. 13 0. 50 

3.72 

0. 127 

4. 0 0. 045 



120 

8.89 4.21 0.52 

4. 12 

0. 133 

3. 95 0. 033 

0,032 

2.31 0.080 

60 

9. 86 




0. 025 

2. 12 0. 062 

0 

10. 96 




0. 020 

1. 95 0. 050 

Table 3- 13. Sizing Data — 

Spar No. 5 (WS 1042), B-9U Wing 

SS 

A c W c 

t c 

W u 


w d 

% 

861 

0. 16 1. 14 

0.034 

1 

0, 025 

1 

0. 025 

801 

0. 16 1. 42 

0. 029 

1 

0. 050 

2. 96 

0.016 

762 

0. 82 2. 51 

0, 082 

1.25 

0. 050 

3. 01 

0. 026 

731 

1. 00 2. 00 

0. 125 

1.36 

0. Q56 

1. 96 

0. 035 

687 

1. 30 2. 93 

0 . 110 

1,42 

0. 061 

3. 11 

0. 051 

627 

1. 90 3. 57 

0 . 134 

1. 59 

0. 064 

3. 81 

0. 046 

567 

2. 04 3. 63 

0.139 

1. 78 

0. 069 

3.91 

0.044 

507 

2.07 3.77 

0. 15 

2.42 

0. 090 

4. 02 

0. 039 

447 

2.87 3.95 

0. 181 

2.50 

0. 095 

4. 08 

0. 040 

387 

3. 50 4. 11 

0.21 

2.50 

0.10 

4. 15 

0.043 

327 

4. 13 4. 27 

0,24 

2.50 

0. 10 

4.23 

0. 045 

267 

4.65 4.39 

0. 265 

2. 50 

0 . 10 

4.30 

0. 047 

207 

4.72 4.40 

0. 268 

3. 09 

0 . 11 

4.34 

0. 045 

163 

4. 99 3. 55 

0.35 

2.60 

0. 081 

3. 45 

0.021 

120 

5. 29 3. 60 

0.37 

2.87 

0. 084 

3.45 

0. 020 

60 

5. 72 4, 47 

0.319 

2, 50 

0. 066 

4. 05 

0. 020 

0 

6. 20 4. 58 

0 . 338 

2. 16 

0. 051 

4.01 

0. 020 
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3 5 2 WING BOX WEI GHT SENSITIVITY TO FACTO R OF SAFETY PERTURBATIO NS, 
me’ weight sensitivity of the B-9Uwin g box to perturbations of factor otaafety la pre- 
sented fo Figures 3-22 and 3-23 for aU of the critical wing leading condittons me 
critical wing'loading conditions are shown in Figure 2-20. The cturve of Figure 3-22 
labeled ULTIMATE DESIGN is based on a structure critical for ultima eslgn 
at foe plotted FS . whereas the cutoffs for yield design are based on a structure cnti- 
caUor yield loads at the indicated FSy. Weights were determined ^ u8e0 ' tb '^ 
computer program used for the baseline analysis. The baselme weight of foe wing box 

is 43,104 pounds. 

In Figure 3-23 the weight sensitivity of the wing box to factor of safety perturbations 
SrT launch vehicle ^ype conditions, maximum a, (W!) and maximum g recovery^ 
(W2) while holding the aircraft condition, subsonic gust (W3), a e ase 
lT is 'plotted along with the sensitivily to perturbations for the aircraft conditio, oMy 
while holding foe launch vehicle conditions at the baseline of FS U - 1. 4. The curve fo 
perforations tin- * load conditions simultaneously Is shown for comparison purposes. 
Inspection of the curves reveals that the aircraft loading condition ^ “tteeffe^ ^ 
thp wine* box weight The figure shows that the whig box weight is g y 
2 F^o“h thicle type loading conditions, and that foe weight can be sigmfi- 

cantly changed by varying FSy for these conditions. 
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Figure 3-22. Wing Box Weight Sensitivity 
to Factor of Safety Perturba- 
tions for All Critical 
Conditions 


l.x 


1 ULTIMATE FACTOR OF SAFETY, FS U 

Figure 3-23. Wing Box Weight Sensitivity 
to Factor of Safety Pertur- 
bations for Various Critical 
Load Conditions 
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3. 6 VERTICAL TAIL BOX 


3.6.1 VERTICAL TAIL BOX STRUCTURAL SIZING . The vertical tail structural box 
is constructed of 6A1-4V titanium alloy and has a three-spar arrangement with the front 
spar on the 10% chord line, the rear spar on the 60% chord line, and the mid spar on the 
37% chord line as shown in Figure 3-24. Spars and ribs are of corrugated construction. 
Welding is used to attach spar and rib caps to the corrugated webs. Surface coverings 
are of integrally stiffened extruded "planks," welded together. The rear spar and mid 
spar transfer the bending moments and shear into the body bulkheads through fittings. 



AFT THRUST BHD 


Figure 3-24. Vertical Tail Configuration 
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The vertical tail was simulated and analyzed by means of a Convair computer proce- 
dure that used the stiffness approach to obtain an internal load distr uti . 
spanwise bending moment distribution used for member sizing is shown in Figure 2 . 

Anothe^ computer program was used to optimize the sMn-stlflener conflguratton. The 
skins of the fin box are fully effective from the tip to the canted rib. 

The section chosen for the fatigue calculations of the pre sent s ^ ls ^ section^ ’ 

Section® - ® of Figure 3-24. The spar cap sizing calculations for tins section 

are^sihovra below\ The toad distribution coefficients used were determined by computer. 


Section A - A of Figure 3-24 




V = 352, 800 lb (ultimate) 
M = 74.234 X 10 6 in-lb 
T = 9.58 X 10 6 in -lb 


= 0. 01 76(352,800) = 6209 = 146 lb/in 
q FS 42. 4 42. 4 

_ 0. 123(352,800) _ 43,394 _ g95 
q CS 62.4 62.4 

_ 0.442(352,800) = 155,938 = ^ lb/in 
q RS 58. 8 58. 8 

Remainder of shear is carried in covers and caps, which are tapered. 


Spar Cap Loads 


Forward P 


cap 


_ 0. 013 (74. 234) 10 6 _ 09 7Rn 


42.4 


Center P 


cap 


0. 032(74. 234)(10 b ) _ , Q nAQ 


62.4 


Aft P 


cap 


_ Q. 068(74. 234) 10 6 = 

— m. r\ n > 


58.8 
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Cap Areas , choosing f = 34 ksi 


Forward A =||^« = 0.670 In 2 


_ , . 38,069 , . 2 

GenterA = mTooo = 1- 12 “ 


85.849 9 

Rear a = = 2 - 52 * 


Covers 


0. 89 (74,234,000) = 66,068,260 in-lb 


_ 66,068,260 

p x = —55 in. ° 1,201,240 lb 


N„ = - I 201,241 = 5725 lb/in 


- 2 . 00 - 




r 

1.27 


x 210 in. 


0.080 

> — 0.157 


For the configuration with t = 0. 180 we have cr cr = 32,450 psi. 


rn. . ... 5725 lb/in 

This compares with cr eff = - — — = 31,805 psi 


3. 6. 2 VERTICAL TAIL BOX WEIGHT SENSITIVITY TO FACTOR OF SAFETY PER- 
TURBATIONS. The weight sensitivity of the B-9U vertical stabilizer box to FS U pP r- 
turbations is presented in Figures 3-25 and 3-26 for all of the critical vertical tail 
loading conditions. The curve of Figure 3-25 labeled ULTIMATE DESIGN is based on 
a structure critical for ultimate design loads at the plotted FSy. Due to the low design 
ultimate stresses that remain within the elastic range of the material, yield design is 

not a consideration. FSu was perturbated concurrently for all critical conditions. 

The critical loading conditions for the vertical tail box are maximum /3q (Tl), sub- 
sonic gust (T2), and maximum rudder hinge moment (T3). 

In Figure 3-26 FS U was perturbated for the launch vehicle condition only (condition Tl) 
whUe holding the aircraft conditions (conditions T2 and T3) at the baseline FS^ = l. 5. 
FSu was also perturbed for the aircraft conditions only while holding the launch vehicle 
condition at the baseline FSy = 1. 4. This was done to determine the relative sensitivity 
of the vertical tail box weight to the two types of conditions. The results are shown in 
Figure 3-25 with the curve for all conditions for comparison. 
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VERTICAL STABILIZER BOX WEIGHT (pounds) 



Figure 3-25. Vertical Stabilizer Box 

Weight Sensitivity to Factor 
of Safety Perturbations for 
All Critical Load Conditions 



Figure 3-26. Vertical Stabilizer Box 

Weight Sensitivity to Factor of 
Safety Perturbations for Vari- 
ous Critical Load Conditions 


Inspection of the curve reveals that the aircraft loading conditions T2 and T3 1 have 
little effect on the vertical tail box weight. The figure shows that the vertical tail 
box weight is highly sensitive to the FS U on the launch vehicle type oa mg con 1 
maximum 0q (Tl), and that weight can be significantly changed by vary ng S u or 

this condition. 


3.7 CREW MODULE 

3 7 1 CREW MODULE STRU CTURAL SIZING . The crew module main structural 
shell is designed to be fail-safe ihrough the use of crack-stoppers and beefed-up skins 
and frames. The aft ellipsoidal bulkhead of the crew module is one sectoral 
on which it is difficult to employ ordinary fail-safe design techniques sue 
stoppers. Therefore the same apparent factor of safety is used for the u 
r^lindrical section skin, and it is stiffened with a rectangular waffle pattern 
to provi T^rack arresting ability in both the circumferential and meridional directions. 

The most critical loads applied to the crew module shell are those arising as a result 
of internal pressurization. The Ap across the shell is presented m Figur 
funetton of time, t, from liftoff. For the Ap curve, an internal cabin pressure of 15 
psia was used, and it was assumed that no leakage occurred. 
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An iterative analysis procedure shows that the longitudinal section through the skin wall 
in the cylindrical section of the module shown in the sketch will provide fail-safe 
capability for a longitudinal through-crack initiating from a frame rivet. 


-A, = 0.25 IN 

frame 


t = 0. 058 

__1 c 


CRACK 

STOPPER (TYP. ) 
A = 0.0825 IN 2 


y 


T 


-23.00- 


T 


r =58 IN. 

module 



Using the method of Reference 11: 
Percent stiffening = 20% 

The stress intensity factor is 
K = Cff /Fa 

Values of C were obtained from Figure 9 
of Reference 11 for a crack initiating at 
a frame rivet. The largest value of S/p 
(frame spacing to rivet pitch ratio) was 
used due to the large frame spacing. 

The gross stress level, a , is 

a = P£_ (15 psi)(58 in.) 
t “ 0. 058 


Figure 3-27. Crew Module Stress Intensity 
Factor Versus Crack Length 
for Crack Initiating from 
Frame Rivet 


= lo. o ksi = t. 


limit 


Figure 3-27 presents the stress intensity 
factor versus crack length for a longitud- 
inal crack emanating from a frame rivet 

hole. The figure shows that fracture arrest is provided by both the first and the second 
frames. The main structural shell is therefore fail-safe for internal pressure loads. 
Fail-safe capability for the glazed areas is provided by use of double windows in the 
doors, and laminated glass in the windshield. The crew module is fail-safe for longi- 
tudinal loads by reason of the use of multiple stringers. 
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q 7 9 APPARENT FACTORS OF SAFETY. When reduced limit design stresses are 
required to meet yield, safe-life, or fail-safe criteria, the apparent factor of safety 
is given by the expression: 


FS (apparent) = ; 

limit 


The skin of the crew module is designed by the fail-safe requirements. Therefore the 
skin has an apparent factor of safety greater than the baseline. For 2219-T87 alumi- 
num at room temperature: 


F tu = 63 » 000 P si » F ty = 51,000 psi 

FS U (apparent) = §^333 = 4. 20, FSy (apparent) = 5^333 - 3. 40 


Comparison of the actual and apparent ultimate safety factors, 2.0 and 4.2 respectively, 
reveals that the fail-safe requirement imposes a significant weight penalty on the skin 

over the weight required by static strength 
for which ultimate design is critical. 

The bulkhead employs the same apparent 
safety factor for fail-safe purposes as the 
skin, and is therefore also subject to a 
large penalty over the weight required for 
static strength. 

3.7.3 CREW MODULE W EIGHT SENSI- 
tivity'tq FACTOR OF SAFETY PER~ 
TURBATTONS . The weight sensitivity of 
the crew module skin, frames, and bulk- 
head for perturbations of ultimate and 
yield factors of safety on the maximum 
operating pressure is presented in Fig- 
ure 3-28. The ultimate factor of safety 
was perturbed over the range of 1. 3 to : - 
1. 7. Inspection of Figure 3-28 reveals 
that the weight is determined by the fail- 
safe requirement for ultimate factors of 
safety of less than 4. 2. The baseline 
weight of the skin, frames, and aft bulk- 
o head is 882 pounds. The weight can go 
lower only if the fail-safe requirement 
is relaxed. Weight reductions to be ob- 
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Figure 3-28. Crew-Module Skin Frames, 
and Bulkhead Sensitivity of 
Weight to Factor of Safety 
Perturbations for Maximum 
Operating Pressure 


tained by relaxation of fail-safe and 
factor of safety criteria are further 
limited by the 1. 5 proof factor require- 
ment, which requires a weight of 555 
pounds. 
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SECTION 4 


FATIGUE ANALYSIS 

On the following pages, a cumulative fatigue damage analysis is made for each of the 
baseline components to determine the safe-life number of missions to initiation of 
fatigue cracks, assuming initially flawless material. The service load spectra shown 
in Figured 2-28 through 2-37 are used. 

Material information used in classical fatigue analysis is usually in the form of S-N 
curves, constant life diagrams, or some such presentation of stress versus cycles- 
to-failure of test specimens. Although this information is in terms of complete failure 
rather than fatigue crack initiation, S-N curves are being used as indicating crack 
initiation for purposes of this study. This interpretation is justified by the fact that 
the standard test specimen configuration used to generate S-N data has a small cross- 
section compared to space shuttle booster structural members. The specimen is 
therefore more sensitive to a given amount of fatigue damage, and progression of 
fatigue damage to complete failure is rapid. The fatigue curves of Figures 4-1, 4-2, 
and 4-3 provide S-N data for 2219-T87 aluminum alloy at room temperature, and 
Ti6Al-4V annealed titanium alloy at room temperature and 650° F, respectively. The 
sensitivity of fatigue life to factor of safety perturbations (i.e. , stress level changes) 
and to fatigue crack initiation scatter factor perturbations is also presented for each 
of the baseline components. 



Figure 4-1. Estimated Fatigue Curves for 2219-T87 Aluminum 
Alloy at Room Temperature with Kj. = 3.0 
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4. 1 LIQUID OXYGEN TANK 


This se ctio n p resents the fatigue damage analysis for the baseline liquid oxygen tank 
3nd the sensitivity of its fatigue life to perturbations of factors of safety and fatigue 

ZlfZT T T" faCt0r * Table 4-1 gives the fati ^ e damage analysis forSter- 
nal pressure for the most critical area of the L0 2 tank, which is the skin at the for- 

™ ° f thG 7 Cylindrica l section * The calculated fatigue life for the L0 2 tank 

Of the T Z7T< , 7 a SCatter faCt ° r ° f 4 * Figure 4 ' 4 P resents the sensitivity 

t e L0 2 tank fatigue life to factor of safety perturbations. The fatigue life of the 

baseline tank is controlled by the proof design of the tank. Figure 4-5 presents the 

sensitvity of the L0 2 tank fatigue life to fatigue crack initiation scatter factor perturb- 

atlOnSf 


4.2 LIQUID HYDROGEN TANK 


This section presents the fatigue damage analysis for the baseline liquid hydrogen tank 
and the sensitivity of its fatigue life to perturbations of factor of safety and faZ” 
crack initiation scatter factor. Table 4-2 gives the fatigue damage analysis for internal 

end S of“th ^ r r°s‘ “ ea °' th6 L " 2 ta " k ’ WMch is the skin at toward 

end of the tank cylindrical section. The calculated fatigue life from this table is 2314 

missions based on a scatter factor of 4. Table 4-3 presents the fatigue damage analysis 

at the fuselage Station 2600 bottom centerline for longitudinal loading due to flight and 

mterna! pressure. This table indicates a fatigue Ufe of 6410 missions based on a scatter 

t “L°f , ' Therefore - the life of the LH 2 tank is critical for fatigue due circum 

ferenhal loatog from internal pressure as indicated by the 2314 mission fatigue life 
calculated m Table 4-2. Figure 4-6 presente the sensitivity of the LH, tank fatigue Ufe 

tL nr fd Safe,y f ‘f/ t “ rb i atio " s - fatigue life of the baseline tank fa controllfd by 
tlK proof design of the tank. Figure 4-7 presents the sensitivity of the LH, tank faUsue 
life, as calculated in Table 4-2, to fatigue crack initiation factor perturbattons. 

4.3 AFT ORBITER SUPPORT FRAME 


This section presents the fatigue damage analysis for the baseline aft orbiter support 
frame at Station 2666, and the sensitivity of its fatigue life to perturbations of factor 
of safety and fatigue crack initiation scatter factor. Table 4-4 presents the fatigue 
damage analysis for the frame. The critical member of the frame is Bar 6 of Figure 
3-15 and Table 3-3. The calculated fatigue life from this analysis 4630 missions based 
on a scatter factor of 4. Figure 4-8 presents the sensitivity of the Station 2666 orbiter 
support frame fatigue life to perturbations of the factor of safety. The reduced fatigue 
life at low safety factors is due to the resulting higher limit operating stresses. The 
curve shows that even for a low ultimate factor of safety, the fatigue life of the bulkhead 
well exceeds the required 100 missions design life. Figure 4-9 presents the sensitivity 

of the orbiter support frame fatigue life to perturbations of the fatigue crack initiation 
scatter factor. 
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NOTE: STRUCTURE DESIGNED FOR 
BASELINE LOAD CONDITIONS 
& CRITERIA. , 
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Table 4-3. Fuselage Damage Analysis - Station 2600 Bottom Centerline 


Mission Phase 


T N 

x 

mean 
fF) (lb/in) 


N t 

X alt 

(lb/in) (inch) 


cr a . 

mean alt 

(ksi) (ksi) 


K 


N 


n/ 


(cycles) (cycles) 


Maximum Thrust 
Ascent 


Ascent 

Entry 


RT 


ntry 


Ent 

Cruise/Landing (1) 

1 

Cruise/Landing (1) 
Taxi (1) 


Taxi (1) 
GAG (1) 


? 

RT 

RT 


NOTES 
( 1 ) 


5036 

1955 

2011 

2198 

2354 

1091 


1091 

477 

i 

477 


Mission Phase 

n/ N 

Maximum Thrust 

0.0038 

Ascent 

0.0001 

Entry 

0 

Cruise/Landing 

0 

Taxi 

0 

GAG 

0 

Z< n/ N > 

0.0039 


2761 0. 

188 26.4 

14.7 

3 

.0 

100 

2.6 x 10 4 

361 

26.8 

1.9 



90, 000 


CO 

625 

i 

3.3 



9,000 


CO 

885 


4.7 



900 


GO 

1149 

T 

6.1 



90 

7 x 10 5 

1413 

26.8 

7.5 



9 

2.5 x 10 5 

104 

10.4 

0.5 



90, 000 

06 

160 

10.7 

0.9 



9,000 

i 


347 

11.7 

1.8 



900 



503 

12.5 

2.7 



99 



158 

5.8 

0.8 



180,000 



231 

i 

1.2 



18, 000 



304 

I 

1.6 



1,800 



378 

1 

2.0 



180 



451 

5.8 

2.4 



18 



118 

2.5 

0.6 



180, 000 



162 

i 

0.9 



18,000 



207 

I 

1.1 



1,800 



252 

t 

1.3 

]' 


180 



300 0.188 2.5 

1.6 

3. 

0 

18 

03 


4.1 

4.1 

3.0 

200 

ao 



Fatigue 


100 

S * F * (2 n/ ) 
M 


100 


4 (0.0039) 


= 6410 missions, based on 
a scatter factor of 4 


( 2 ) 


To provide for one ferry flight per mission, the number of cycles 
for cruise/landing and taxi phases has been increased by a factor 
of 2.0, and two GAG cycles per mission added, using a minimum 
stress from the taxi phase and a maximum stress from the cruise/ 
landing phase. 

Material: 2219-T87 plate. 


N 


0 

0 

0 

0.0001 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 
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Table 4-4. Aft Orbiter Support Frame Load Spectrum and Damage Analysis, 
NOTES: 

1. Critical member judged to be Bar 6 (see Figure 3-15 and Table 3 - 3 ). 

“* Percent of design values, from spectrum curves. Figure 2-32. 

% A 

3. Design value of A = 775 kips. A ( 775 \ 

z z 100 ' ; 

% A 

4. Design value of A = 341 kips. A = — — /^ 4 i\ 

y y 100 ' ' 

5. For a unit A of 1000 kips, cr in Bar 6 = 24.7 ksi 

" z 

6 . For a unit A^ of 1000 kips, a in Bar 6 = 68.0 ksi 

7. Cycles to failure (crack initiation) from Figure 4 - 1 . 

8 . Material is 2219-T87 aluminum alloy. 

9 . Operating temperature for above conditions assumed to be RT . 

Fatigue Life Computation: 

= °*0054 for 100 missions 

Fatigue Life 

100 _ 100 

S.F. x 2 (n/N) ~ 4(0.0054) = 463 <> missions 


Contd 
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to Factor of Safety Perturbations 















4.4 THRUST STRUCTURE 

This section presents the fatigue damage analysis for the baseline ttmust| ~e and 
L sensitivity of its fatigue life to perturbations of factor safety and fatigue crack 
;l“caLr factor .^Table 4-5 presents the fatigue damage analysis of toe cm ical 
tension element of the thrust structure, which is the thrust beam aap. The ^ysis 
was made using the load spectrum of Figure 2-34, and based on a scatter factor of 4, 
gives a fatigue life of 877 missions, which is well in excess of the 10° 

Ufe requirement. Figure 4-10 gives the sensitivity of the thrust beam cap fatigue life 
to perturbations of the factor of safety. The reduced fatigue life at low safety factors 
is due the higher limit operating stresses resulting from these lower safety fetors 
The curve shows that for all safety factors investigated, the thrust structure has 
tigue life well In excess of the 100 mission requirement. Figure 4-11 P^hte the 
variation of the fatigue life as a function of the fatigue crack initiation scatter factor. 


4.5 WING BOX 

This section presents the fatigue damage analysis for the baseline wing box and the 
leTsitiX of it s fatigue life to perturbations of factor of safety and fatigue crack mo- 
tion scatter factor. Table 4-6 presents the fatigue damage analysis for the wing spar 
cap^ wMch are die most critical elements of the wing box. The analysis gives a base- 
line fatigue life of 182 missions whereas the design service life is 100 m ssions. 
is the lowest fatigue life of any major structural assembly investigated and indicates 
thetoad spectrum** for the wing to be severe. Figure 4-12 presents the sensitlvityof 
the wing spar caps fatigue life to perturbation of the ultimate factor of safety, 
duced fatigue life at low safety factors is due to the resulting higher limit operating 
stresses. The curve shows that for the baseline fatigue crack initiation scatter factor 
of 4, a FS U of 1 . 26 is needed to meet the requirement for a design service life of 
missions? The curve also shows a fatigue life of only 65 missions for tension steueture 
designed by the yield factor of safety, PSy = 1.1. Although this is less than the design 
service life requirement of 100 missions, 3 it is not critical unless FS U is reduced to the 
point where yield design becomes critical. This cannot happen, however, because FSu 
cannot be reduced below 1.26 without violating the 100 mission requirement. 

Figure 4-13 presents the sensitivity of the wing box spar caps fatigue life to perturba- 
tions of the fatigue crack initiation scatter factor. 

4.6 VERTICAL TAIL BOX 

This section presents the fatigue damage analysis for the baseline ver ^ a1 ^^ ^ 
the sensitivity of its fatigue life to perturbations of factor of safety and fatigue c 
initiation scatter factor. Table 4-7 present, the fatigue damage analysis and gives the 
verv large fatigue life of 125, 000 missions based on a scatter factor of 4. Fat gu 
Te^fert is nofcritical for the vertical tail box. Figure 4-14 presents the sensitmty 
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Table 4-5. Thrust Beam Cap Fatigue Damage Analysis 


Design 
(r limit 

(ksi) 

T 

(°F> 

K t 

T 

m 

(%) 

T 

a 

(%) 

(1) 

■ fT 

m 

(ksi) 

cr 

a 

(ksi) 

n 

e 

(cycles) 

(2) 

n 

(cycles) 

(2) 

a 

a 

(ksi) 

N 

(cycles) 

n/N 

92.9 

RT 

3.0 

96.8 

0.05 

89.9 

0.05 

15, 000 




» 










5, 000 

0.195 



o 

92.9 

RT 

3.0 

96.8 

0.37 

89.9 

0.34 

10, 000 














9,000 

0.67 



o 

92.9 

RT 

3.0 

96.8 

1.08 

89.9 

1.00 

1,000 






92.9 

RT 

3.0 

96.8 

1.79 

89.9 

1.66 

100 

900 

1.33 



0 

92.9 

RT 

3.0 

96.8 

2.50 

89.9 

2.32 

10 

90 

1.99 



0 

92.9 

RT 

3.0 

96.8 

3.20 

89.9 

2.97 

1 

9 

2.64 

CD 


0 

92.9 

RT 

3.0 

50 

50 

46.4 

46.4 

1 

1 

47.4 

3.5 x lo 3 

0.000285 


^ ( n) thrust beam cap 0.000285 for one flight 


Fatigue life = = 877 missions 

NOTES: 

(1) Alternating thrust in percent of design thrust from Figure 2-34. 

(2) Cycles for one flight. 

(3) Material: Ti-6AI-4V annealed. 


of the vertical tail box fatigue life to perturbation of the ultimate factor of safety. The 
reduced fatigue life at low safety factors is due to the resulting higher limit operating 
stresses. The curve shows that even for a low ultimate factor of safety, the fatigue 
life of the box far exceeds the required 100 mission design life. Figure 4-15 presents 
the variation of the vertical tail box fatigue life as a function of the fatigue initiation 
scatter factor. 

4.7 CREW MODULE 

This section presents the fatigue damage analysis for the crew module and the sensiti- 
vity of its fatigue life to perturbations of factor of safety and fatigue crack initiation 
scatter factor. Table 4-8 presents the fatigue damage analysis for the baseline fail- 
safe crew module. The analysis indicates a fatigue life of 2, 500, 000 missions, which 
is very high and indicates that fatigue is not critical for the module. Figure 4-16 pre- 
sents the sensitivity of the crew module fatigue life to factor of safety perturbations. 

The reduced fatigue life at lower safety factors is due to the resulting higher limit 
operating stresses. The ultimate factor of safety was perturbed over the range of 1. 5 
to 5.0, while the yield factor of safety was perturbed over the range of 1.3 to 1.7. The 
safe fatigue life is determined by the fail-safe requirement for ultimate factors of safety 
of less than 4.2. Lower fatigue lives result only if the fail-safe requirement is relaxed 
Fatigue lives that result for lower safety factors, when fail-safe isn't required, 
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are 


variation of fatigue life as a function of the fatigue crack initiation scatter factor. 



Figure 4-10. Thrust Beam Cap Sensitivity of Fatigue 
Life to Factor of Safety Perturbations 




Figure 4-11. Thrust Beam Cap Fatigue Life (for Crack 
Initiation) Versus Scatter Factor 



Figure 4-12. Wing Spar Cap Sensitivity of Fatigue Life 
to Factor of Safety Perturbations 
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Table 4-6. B-9U Wing Spar Caps Fatigue Damage Analysis 


Ascent 

t 


t 

Ascent 

Entry 


Phase 

T 

(°F) 

^limit 

(ksi) 

CT 

mean 

n limit 
(1) 

a i* 

. alj 

P limit 
(1) 

a 

mean 

(ksi) 

<T alt 

(ksi) 




RT 

91. 

2 

0 

0.015 

0 

1.37 






0 

0.025 

0 

2.28 






0 

0.035 

0 

3.19 






0 

0.045 

0 

4.10 






0 

0.055 

0 

5.01 






0.15 

0.035 

13.7 

3.2 






0.15 

0.05 

13.7 

4,6 






0.15 

0.065 

13.7 

5.9 






0.15 

0.08 

13.7 

7.3 






0.15 

0.09 

13.7 

8.2 






0 

0.055 

0 

5.0 






0 

0.09 

0 

8.2 






0 

0.125 

0 

11.4 






0 

0.155 

0 

14.1 






0 

0.185 

0 

16.9 






0.40 

0.08 

36.5 

7.3 






0.40 

0.145 

36.5 

13.2 






0.40 

0.21 

36.5 

19.2 






0.40 

0.27 

36.5 

24.6 






0.40 

0.33 

36.5 

30.1 






0.10 

0,105 

9.1 

9.6 






0.10 

0.185 

9.1 

16.9 






0.10 

0.30 

9.1 

27.4 






0.10 

0.45 

9.1 

41.0 






0.10 

0.605 

9.1 

55.1 






0.15 

0.135 

13.7 

12.3 






0.15 

0.20 

13.7 

18.2 






0.15 

0.37 

13.7 

33.7 






0.15 

0.61 

13.7 

55.6 


f 

RT 

91.2 

0.15 

0.80 

13.7 

72.9 


650 


91.2 


0.075 

0.135 

0.185 

0.23 

0.37 

0.47 


0.075 

0.135 

0.185 

0.23 

0.37 

0.47 


Entry 

, Cruise/Landing (2) 


Cruise/Landing (2) RT 
Taxi (2) RT 


650 

91.2 

0.50 

0.50 

RT 

91.2 

0.20 

i 

0.07 


Taxi (2) 
GAG (2) 


RT 

RT 


91.2 

91.2 


0.20 

- 0.021 


- 0.021 

0.255 


0.17 

0.27 

0.36 

0.43 

0.040 

0.060 

0.080 

0.095 

0.110 

0.385 


6.8 

12.3 

16.9 
21.0 
33.7 

42.9 
45.6 

18.2 


18.2 ' 
- 1.9 


- 1.9 

23.2 


K , 


3.0 


6.8 

12.3 

16.9 

21.0 

33.7 

42.9 

45.6 

6.3 

15.3 

23.9 

32.8 

39.6 

3.6 
5.5 

7.3 

8.7 

10.0 | 

35.1 3.0 


N 

n 

n 

¥ 

oc 


90, 000 

0 


i 

9,000 

0 



900 

0 



90 

0 



9 

0 



90,000 

0 



9, 000 

0 



900 

0 



90 

0 



9 

0 



90,000 

0 



9,000 

0 



900 

0 



90 

0 


00 

9 

0 


a» 

90, 000 

0 


03 

9,000 

0 

500 

1,000 

900 

0.0018 

90,000 

90 

0.0010 

30,000 

9 

0.0003 


CP 

90, 000 

0 

a> 

9,000 

0 

170,000 

900 

0.0052 

20, 000 

90 

0. 0045 

5, 500 

9 

0.0016 

CD 

90, 000 

0 

4 x 10 6 

9,000 

0.0022 

50, 000 

900 

0,0180 

5,000 

90 

0.0180 

1,900 

9 

0.0047 


CO 

90,000 

0 

00 

9,000 

0 

1 x 10 6 

500 

0.0005 

8 X 10 4 

250 

0.0031 

8 x 103 

150 

0.0188 

3 x 10 3 

100 

0.0333 

2.5 x 10 3 

1 

0.0004 

ao 

180,000 

0 

CO 

18,000 

0 

2.2 x 10 5 

1,800 

0.0082 

3.8 x 10 4 

180 

0.0047 

1.6 x 10 4 

18 

0.0013 

CD 

180,000 

0 

A 

18,000 

0 

l 

1,800 

0 

t 

180 

0 

00 

18 

0 

2 x 10 4 

200 

0.0100 
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Table 4-6. B-9U Wing Spar Caps Fatigue Damage Analysis, Contd 


Mission Phase 



Ascent 0.0573 


Fatigue life = 


100 

4(0.1374) 


- 182 missions, based on a 
scatter factor of 4. 


Entry 

0.0561 

Cruise/ Landing 

0.0140 

Taxi 

0 

GAG 

0.0100 

2(n V 

0.1374 


NOTES: 

(1) To provide for one ferry flight per mission, 
the number of cycles for the cruise/landing 
and taxi phases has been increased by a factor 
of 2.0, and two GAG cycles per mission added, 
using a minimum stress from the taxi phase 
and a maximum stress from the cruise/landing 
phase . 

(2) Material: T16A1-4V annealed. 



Figure 4-13. Wing Spar Caps Fatigue Life (for Crack 
Initiation) Versus Scatter Factor 
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Table 4-7. B-9U Vertical Tail Fatigue Damage Analysis, Contd 



Mission Phase n/N 

Ascent ,0002 

Cruise/Landg 0 

£ (n/N) . .0002 


NOTES: 



125,000 missions, 
based on a scatter 
factor of 4. 


1) To provide for one ferry flight per mission, 

been increased to a factor of 2 , 

2) Material is Ti-6A1 - 4V annealed. 


the number of cycles for the cruise/landing phase has 


Table 4-8* Crew Module Fatigue Damage Analysis 




0. 0000189 for 1 lifetime of 100 missions. 


0. 0000100 = damage due to flight for 100 missions. 


1-0.0000189 = 
Safe fatigue -life 


0.9999811 . available damage after 1 lifetime. 

. 100 ( „ 0.9999811 1 _ . A 

4 V 0. 0000100 / = Z " 50x10 miaslona. 
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FATIGUE CRACK INITIATION BASELINE 

SCATTER FACTOR = 4 
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FATIGUE LIFE (FOR CRACK INITIATION), (missions x 10 


1.5H> 


NOTES: | | | 

1. FATIGUE CRACK INITIATION 
SCATTER FACTOR = 4 

2. DESIGN SERVICE LIFE IS 

100 MISSIONS 

3. Kj. = 3, 0 

4. PROOF FACTOR = 1.5, EXCEPT 
( AS NOTED 

BASELINE (DETERMINED BY FAIL-SAFE) 



2. Ol — 14 I 


F S v = 1.5 


•01 = 1.5 CUTOFF 


■ FSy *1.3 FSy 
-FSy = l.oj ASSUMED 






2 »5 3.0 3.5 4.0 

ULTIMATE FACTOR OF SAFETY, FS 


Figure 4-16. Sensitivity of Fatigue Life to 
Factor of Safety Perturbations 
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Figure 4-17 . Crew Module Fatigue Life (for Crack 
Initiation) Versus Scatter Factor 



SECTION 5 

SAFE -LIFE ANALYSIS 


This section presents the results of crack growth studies when the structural compo- 
nents are assumed to contain crack-like flaws. Flights to failure are calculated for 
all components. 

Th ® anaIyses are based on a Convair crack growth computer program 

called CRACKPROP, which calculates crack growth for both cyclic and sustained 

^ * 8 - Init ; al flaws are assumed to ^ elliptical surface flaws or through-cracks for 
the LOg and LH 2 propellant tank walls and the vertical stabilizer skin. Corner cracks 
emanating from flange edges are assumed for the thrust structure, orbiter support 
bulkhead, and wing spar caps. An analysis is also made assuming a crack initiating 
at a fastener hole in those components where mechanical fasteners may be used 
i.e., the wing structure, thrust structure, and the orbiter aft support bulkhead’ 


For ihe L0 2 and LHg propellant tanks the initial flaw size is assumed to be that flaw 
screened by proof test using a plane strain fracture toughness (Kj ) value. When the 
calculated elliptical surface flaw screened by the proof test is greater than the tank 
wall thickness, an equivalent through-crack of an area equal to the area of a surface 
flaw on the verge of leakage is assumed. 

Minimum fracture toughness values were used for all calculations of initial and criti- 
cal flaw sizes. Because of this, the safe-lives calculated for the tanks should be 
treated with caution. However, where the initial flaw size was not dependent on 
material toughness the use of the minimum toughness in determining the critical flaw 
size does give the shortest life. 

In addition to the basic safe -life analysis of the major structural components selected 
for study, this section also presents proof factor, apparent factors of safely, and 
weight sensitivity to flaw growth scatter factor for structure designed by proof pres- 
sure. In addition, the sensitivity of safe-life to factor of safety and flaw growth scatter 
factor is presented for all components. 

5.1 CYCLIC AND SUSTAINED FLAW GROWTH RATE CURVES 

Figures 5-1 through 5-6 present crack growth rate curves of da/dn versus A Kj and 

da/dt versus AKj, which are used in this section in the safe-life analysis of structural 
components containing flaws. 

Hie cyclic growth rate curves (da/dn versus AKj) for the 2219-T87 aluminum base 
metal at room temperature and at -320° F were derived from data found in Reference 
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-32.0 KSl/INCH 




Figure 5-1. Cyclic Flaw Growth Rate for 
2219-T87 Aluminum Alloy at 
Room Temperature 



Figure 5-3. Cyclic Flaw Growth Rate for 
2219-T87 Aluminum Alloy at 


Figure 5-2. Sustained Flaw Growth Rate 
for 2219-T87 Aluminum Alloy 
at Room Temperature 



Figure 5-4. 


Sustained Flaw Growth Rate 
for 2219-T87 Aluminum 
Alloy at -320°F 










Figure 5-5. Cyclic Flaw Growth Rate for 
Ti-6A1-4V (ELI) Annealed 
Titanium Alloy at Room 
Temperature 


Figure 5-6. Sustained Flaw Growth Rate 
for Ti-6A1-4V (ELI) Annealed 
Titanium Alloy at Room 
Temperature 


14. The sustained growth rate curves (da/dt versus AK X ) for the 2219-T87 aluminum 
base metal at room temperature and at -320°F were derived from data found in Refer- 
ence 15. 


The cyclic growth rate curve (da/dn versus AKj) for the Ti-6A1-4V annealed titanium 
base metal at room temperature was derived from data found in Reference 16. The 
sustained growth rate curve for the same material and temperature was derived from 
data found in References 16 and 17. 

5.2 LIQUID OXYGEN TANK 

5.2.1 LOg TANK SAFE -LIFE ANALYSIS . The LOg propellant tank is assumed to 
contain two distinct types of flaws. These are an elliptical surface flaw and a through 
crack, for which the initial size of each is developed in this section. These flaws are 
propagated to a specified failure criterion under the influence of the applied pressure 
spectrum loading . The critical crack lengths for both types of flaws are also develop- 
ed here. 
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The applied pressure spectrum loading for the LO 2 tank was developed from the 
curve of Figure 2-36. Only those portions of the total loading spectrum that could 
contribute to the growth of the flaws were included in the spectrum for the tank. It 
should be noted here that it was necessary to take average pressures over a given 
time span to approximate the curve. The pressures used in developing the 

final spectrum are as follows: 


LOo Tank Upper Dome Equator Pressures 


Pressure 

(P s i) 

Time at Pressure 
(minutes) 

Description 

17.5 

4.0 

Nominal ullage pressure 

12.0 

6.0 

Vent after staging pressure 

19.5 

4.0 

Pressure regulator malfunction stress 
(assumed to occur once every 20 flights) 


The tensile stresses in the L0 2 tank at the upper dome equator were developed from 
the pressures in the preceding list through the use of the following formula. 


pR p (198) 
a ~ t 0.090 

p = internal pressure (psi) 

R = 198 inches = tank radius 

t = 0.090 inch = tank wall thickness at the upper dome equator 

The results of this calculation and the final form of the pressure loading spectrum are 
as follows: 


Minimum 

Stress 

(ksi) 


0.000 

0.000 

0.000 


LO Tank Pressure Loading Spectrum 
2 


Maximum 

Stress 

(ksi) 

Cycles 

per 

Flight 

Time per 
Flight 

! (minutes) 

38.8* 

1 

4.0 

6.0 

38.8* 


26.4 




-Onceevery 20 flights. this nominal ullage pressure stress is replaced with the 
pressure regulator malfunction stress of 42.8 ksi. 
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The elliptical surface flaw is assumed to have two different initial aspect ratios, 
a/2c (see sketch below). These two aspect ratios are a/2c = 0.1 and a/2c = 0. 4. 



t = 

0.090 

IN. 


The initial flaw size, which is calculated here for both the 0. 1 and 0.4 aspect ratios, 
is the maximum flaw size that would be screened by a proof test of the tank, using a 
minimum value for the material toughness parameter, K Ic ,to be consistent with the 
value used in the crack growth analysis, and using the yield stress for the maximum 
stress developed in the tank wall during a proof test. 


The equation for the maximum stress intensity factor for the elliptical surface flaw, 
which is used to calculate the maximum flaw size screened by a proof test, is as 
follows: 


K 


I 


1. 1 a Jr Jk (M ) 
K 

j 1 

y 0 2 - 0.212 (o/cr Y ) 2 


(Reference 10, Equation IX-8) 


where 


< t = applied stress (ksi) 

a y = tens H e yield stress (ksi) 

a = flaw size (inch) 

2 

0 = a function depending upon the value of a/2c 

for a/2c = 0. 1, 0 2 = 1. 10355 
for a/2c = 0. 4, 0 2 = 2. 01096 

•Mj£= deep flaw correction factor, is a function of a/t and a/2c, from 
Reference 18, Page 135. 
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The L02 tank Is proof tested at room temperature so that the value of used in 
the following calculations will be the minimum value of Kj at room tempera ure. 
This value is K, = 32. 0 ksi ,/mSh (Reference 6, Figure 52, lower curve . 
Substituting thisvalue of K, into the equation for the stress intensity factor an 
using Ov = 51.0 ksi (2219- T87 aluminum base metal at room tempera ure) 
proof test stress, we can arrive at a value of 'a' from the following equation: 


1 . 1 


32.0 = 


(51.0) J J <M k ) 


/ o , 2 

k - 0.212 (51.0/51.0) 


Note in the above equation that the variable M K is a function of the «nw sine, a , 
that a trial and error solution is necessary to find the correct value of a. 
results of this solution for both aspect ratios of 0. 1 and 0. 4 are shown below. 

For a/2c = 0. 1, the maximum flaw size that would be screened by a proof test is: 


= 0. 05464 inch 


For a/2c =0.4, the maximum flaw size that would be screened by a proof test re- 
LTtedL a flaw size, 'a' , which was larger than the thickness of the tank wall, t 

0. 090 inch. 

Since the 0 4 aspect ratio results in an initial flaw size greater than the thickness, an 
etpiivaUu/ throughcrack, with an area equal to the area o, a surface flaw of aspect 
ratio a/ 2c = 0. 4 on the verge of leakage, is calculated here. 



t = 0.090 
IN. 



Cross-sectional area of flaw - 


A 

c 


7T (a) (c) 
2 


0. 01590 in 


2 
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For a through crack, the area would be calcuated by 


A 

A q = (2c) x t or (2c) = -p 


Therefore the equivalent through crack would have a (2c) 


i 


dimension of 


(2c) t 


A 

c _ 0.01590 
t 0. 090 


0.17671 inch 


The elliptical surface flaw of initial size aj = 0. 05464 inch and the through crack of 
initial size (2c)i = 0. 17671 inch are propagated to failure. The run to failure is made 
using material properties and growth rate curves for 2219-T87 aluminum base metal 
at -320 °F . The -320° F temperature is used because growth rates at this temperature 
are more critical than those at room temperature, and the LO 2 tank at the upper dome 
equator is assumed to be prechilled to -320°F. The critical flaw sizes must there- 
fore be calculated from the properties of the material at -320° F. 


The minimum value of Kj c is used t o calc ulate critical flaw sizes, and for the -320°F 
temperature this value is 35. 5 ksi \/inch (Reference 6, Figure 52, lower curve at 
-320°F). The tensile yield at this temperature is taken to be cry = 61.0 ksi. The 
maximum stress in the spectrum, on which the critical flaw sizes must be based is 
a = 44. 0 ksi. 


For the elliptical flaw of aspect ratio a/2c = 0.1, the critical flaw size, a^, is 
calculated from the equation cr 


35.5 


1.1 (44.0) Jit Jk (M ) 
cr K 




10355 - 0.212 (44.0/61.0) 

which results in a value of a = 0. 07091 inch. 

cr 

For the through crack the equation for the stress intensity factor 
cr sfir -J2c 


is 


*!- 






(Reference 18, Page 28) 
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Substituting the critical values into this equation results in 


44.0 Jtt 

35.5 = • - " — 

\ J ~2 - ( 44 . 0 / 61 . 0) 2 

or (2c) = 0.30660 inch. 

' cr 

Results of flaw growth calculations: 

Carrying out the analysis described above by use of a computer program, the follow 
ing results were obtained. 

Elliptical Surface Flaw, a/2c = 0. 1 (See Figure 5-7) 

Starting with an initial flaw size of H = 0.05464 inch, it took 294 flights for the flaw 
to grow to the critical size of a cr = 0.07091 inch (see sketch below) . Note that a 
scatter factor of 1.5 was used on the number of flights to failure. 



Figure 5-7 . Crack Growth in LO Tank for Pressure Load 
Spectrum (Surface I^aw, a/2c - 0.1) 
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FLAW SIZE, 2c (inch) 


0.07091 IN. 


TANK 

WALL 



Through Crack (See Figure 5-8) 

Starting with an initial flaw size of (2c) t = 0.17671 inch, it took 867 flights for the 
flaw to grow to the critical size of (2c) cr = 0.30660 inch. Again a scatter factor of 
1 . 5 was used on the flights to failure . 


I , , .EQUIVALENT 

l— *H /l 

THROUGH -CRACK 

(2c) = 0.30660 

cr 

r- 


\ 0.09 INCH 

' SURFACE FLAW 
a/2c = 0.4, ABOUT 
TO LEAK 

1 

.-EQUIVALENT THROUGH-CRACK- 


J 


2^ = 0.17671 



IE 


FLIGHTS TO LEAK = 1 

FLTS. 

TO 

FAILUR 

1 1 1 Mill 

1 1 I i i l i i 

_L 1 1 1 1 1 1 1 


NUMBER OF FLIGHTS 


Figure 5-8. Crack Growth in LOg Tank for Pressure Load Spectrum 
(Surface Flaw, a/2c = 0.4 and Equivalent Through Crack) 
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5.2.2 LO TANK PROOF FACTOR AND APPARENT FACTORS OF SAFETY . For 
final verification of the structural integrity of the main Space Shuttle booster LOg 
tank, primary reliance is placed in a pressure proof test prior to assembly into the 

booster vehicle . 

The proof test logic is explained in detail in Reference 19, Fracture Control of Metallic 
Pressure Vessels, NASA SP8040. The proof test consists of loading the tanks to a 
stress level greater than the maximum stress level expected in service. In addition, 
the proof test should be conducted at a temperature consistent with the operating tem- 
perature. If the proof test is completed successfully, the proof test provides assur- 
ance that all existing flaws or defects are less than the critical size required for frac- 
ture at the proof stress level. In addition, the safe-life of the tank at the operating 
stress level can be determined by fracture mechanics analysis where the safe-life en- 
sured by the proof test is the time required to grow the smaller "proof stress flaw" 
to the larger critical size associated with the maximum service operating stress. The 
task consists of developing a Kj /Kt versus number of flights curve by integrating the 
combined cyclic and sustained load flaw growth over arbitrarily selected flight incre- 
ments using the flight pressure load spectrum and the flaw growth data. The final 
curve for the LO 2 presented in Figure 5-9* 



Figure 5-9. LC> 2 Tank Stress Intensity Ratio Versus Flights to Failure 



The method for obtaining die proof factor, a , from this plot is to read K^/K^ for 
the desired number of flights to failure. In this case, for the baseline, the flights to 
failure were 150; that is, the scatter factor of 1.5 multiplied by the design service 
life of 100 flights*. Then, 

1 1 

a = ; — = = 1.23 

I^./Kt 0.809 * 

1 A c 

The L0 2 tank is proof tested as illustrated in Figure 2-19. For the LO tank, a 
three-stage proof test with LN 2 and air as the proof test medium is selected to mini- 
mize the weight impact of the proof test. The proof test steps are: 

a. Assemble lower dome (segment 1) to a manufacturing bulkhead, erect and support 
vertically, and proof test with LN 2 and 49 psi ullage. 

b. Assemble lower dome to lower L0 2 tank barrel (i.e. , segment 2), assemble lower 
dome and barrel assembly to a manufacturing bulkhead, erect and support verti- 
cally, and proof test with LN 2 and 32.5 psi ullage. 

c. Assemble lower dome and barrel assembly (i.e. , segments 1 and 2) to a upper 
dome and barrel assembly (i.e. , segment 3), erect and support horizontally, fill 
tank with void reducing plastic balls , and proof test with room temperature dry 
air at 21 psi pressure. 

Due to the reduced limit design stresses required by the proof test for the safe-life of 

the tank, there is an apparent ultimate factor of safety that results, and it is given by 
the expression; 


FS^ (apparent) = - 

limit 


.♦Comparison of the number of flights to failure computed in Section 5.2.1 reveals a 
difference between the actual computed value of safe-life, 294 flights, and the number 
of flights to failure used to determine the proof factor above. The primary reasons 
for the difference in the lives calculated are the differences in assumptions and data 
used to generate the K^/K^ versus flights to failure curve, Figure 5-9, and the LOo 
tank safe-life analysis of Section 5.2.1. Although deep flaw magnification for both 
analyses was used, they assume different skin thicknesses and load spectra, and they 
also utilize different flaw growth data. Therefore , close consistency between the cal- 
culated safe-life and the 150 missions used to determine the proof factor should not 
be expected. 
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. f f f nr the various L0 o tank elements are comput 

The apparent ultimate factors of safety for the various u^ 2 

ed below. 


aaBR.st=r.tsr. ssssssss 

1.4. 


F = 63,000 psi (2219-T87 at RT) 
tu 


f (limit operating) 



52 , 000 
1.23 


42,100 psi 


FS^(apparent) 


63,000 

42,100 


1.495 


Lower Dome . Hie lower dome is also designed by proof pressures; the nominal ulti 
mate safety factor is 1.4. 


F = 75,000 psi (2219-T87 at -297°F) 
tu 


f (limit operating) 



62,000 

1.23 


50,400 psi 


FS^ (apparent) 


IM92 = i.49 

50,400 


Skins . The nominal ultimate factor of safety for 
sign’d by proof pressure . See Section 3 . 1 . 1 . 2 


the skins is 1.4, and they are de- 
fer determination of the skin thickness. 


Forward of Tank Station 310 


F = 63 , 000 psi (2219-T87 at RT) 
tu 


f (limit operating) 


pR _ 1.75 198_ _ 38 750 psi 

t 0.09 1.23 


FS^ (apparent) 


63 , 000 
38,750 


1.625 


Aft of Tank Station 310 
Just aft of Station 310: 

F = 75,000 psi (2219-T87 at -297° F) 
tu 
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f(limit operating) 


FS^ (apparent) 


pR _ 17.5(198) 
t 0.105 


75,000 

33,200 


= 2.26 


33,200 psi 


Just forward of the intersection with the lower dome: 


f (limit operating) 



31(198) 

0.126 


48,750 


FS^ (apparent) 


75,000 

48,750 


1.54 


It will be noted that for all the cases checked, the apparent FS,. is greater than the 
nominal baseline FS U of 1.4. 


TANK wejght SENSITIVITY TO FLAW GR OWTH SCATTER FACTOR 
P ERTURB A TION S . Since the L0 2 tank end domes and skin are designed by proof 
pressure and the curve of K^/Kj versus flights to failure is given in Figure 5-9, it 
is possible to determine the weight sensitivity of these items to perturbations of the 
flaw growth scatter factor. The procedure followed is: 


a. Enter Figure 5-9 for the scatter factor of interest multiplied by the service life, 

> 2,0 scatter factor x 100 mission life — 200 missions). 

b. Obtain the new l/a from the curve of Figure 5-9, (e.g. , for 200 missions, 

1/a = 0.798, a = 1.255). 

c. Calculate the new element weight for: 

Proof pressure = a x maximum operating pressure. 

The weight sensitivity of the upper dome, lower dome, skin, and combined skin and 
domes to flaw growth scatter factor perturbations, using this procedure, is presented 
Figure 5-10 through 5-13 respectively. 

5.2.4 LQ 0 TANK SAFE -LIFE SENSITIVITY TO FACTOR OF SAFETY AND FL AW 
GROWTH SCATTER FACTOR . Figure 5-14 presents the effects of ultimate and yield 
factor of safety on the propellant tank safe-life with a yield factor of safety during 
proof test maintained at a constant value of 1.0, (i.e. , FS = 1.0 during proof test). 
These curves were developed from the stress intensity ratio versus number of flight 
curves (see Figure 5-9) for the L0 2 tank. These curves were generated assuming a 
semi-elliptical surface flaw in the tank walls and ihat the flaws propagated to failure 
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FLAW-GROWTH SCATTER FACTOR 


FLAW GROWTH SCATTER FACTOR 


Figure 5-10. Upper LO z Tank 001116 Assem- 
bly Weight Sensitivity to Flaw- 
Growth Scatter Factor 


Figure 5-11. Lower L0 2 Dome Assem- 
bly Weight Sensitivity to 
Flaw-Growth Scatter Factor 
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FLAW-GROWTH SCATTER FACTOR 


Figure 5-12. LO a Tank Skin Weight Sen- 
sitivity to Flaw-Growth 
Scatter Factor 


Figure 5-13. L0 2 Tank Skin and Domes 
Weight Sensitivity to Flaw- 
Growth Scatter Factor 
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Figure 5-14. LOg Tank Safe-Life Versus Factor of Safety 

under the influence of the applied pressure loading spectrum. The L0 2 tank wall was 
assumed to be at -320°F and to have the following material properties. 


Property/ Te mperature -320°F 

F^ (ksi) 78.0 

F ty (ksi) 61.0 

Kj (ksiv/fn7) 35.5 

c 


Ihe curves of stress intensity ratio versus flights to failure were converted to appar- 
ent ultimate and yield factors of safety through the following relationships: 

Kj/Kj = 1 /a 
i c 

F limit = F ty^ a ^ asec * on FS^ =1.0 during proof test) 
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SAFE UFE (FLAW GROWTH TO FAILURE), (missions) 


<W 

FS u (apparent) - VWu' /*, > 

i c 

1 

FSy(apparent) = F^^ = (K][ / Kj ) 

i c 


Tto sensitivity ot the safe-life of the baseline L0 2 tank to flaw growth variations is 

presented in Figure 5-15. The figure reveals that the safe-life decreases very 

as the scatter factor is increased above the baseline value of . . 



FLAW GROWTH SCATTER FACTOR 

Figure 5-15. LO,, Tank Safe-Life (Flaw 
Growth to Failure) Versus 
Scatter Factor 


5.3 LIQUID HYDROGEN TANK 

5 . 3.1 JH- TANK SAFE -LIF E ANALYj- 
SIS. The LH 2 propellant tank is assum- 
Idto contain two distinct types of flaws. 
These are an elliptical surface flaw and 
a through crack, for which the initial 
size of each is developed in this section. 
These flaws are propagated to a speci- 
fied failure criterion under the influence 
of the applied pressure spectrum load- 
ing. The critical crack lengths for both 
types of flaws are also developed here. 

The applied pressure loading spectrum 
for the LH 2 tank was developed from the 
curve of Figure 2-35. Only those por- 
tions of the complete loading spectrum 
that could contribute to the growth of 
the flaws were included in the spectrum 
for the tank. The pressures used in 
developing the final spectrum are: 
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LH 2 Tank Upper Dome Equator Pressures 


Pressure 

(psi) 

Time at Pressure 
(minutes) 

Description 

15.0 

2.5 

Tank lockup pressure 

22.3 

3.5 

Nominal' ullage pressure 

16.0 

6.0 

Vent after staging pressure 

23.8 

3.5 

Pressure regulator 

Malfunction pressure — assumed to 

occur once every 20 flights 


Stresses in the tank at the upper dome equator were developed from these pressures 
through the use of the formula 

P R P (198) 
t 0.116 

where 

p = pressure (psi) 

R = 198 inches = tank radius 

t = 0.116 inch = tank thickness at the upper dome equator 


The calculated stresses and the final form of the pressure loading spectrum is shown 
below. 


Minimum 

Stress 

(ksi) 

Maximum 

Stress 

(ksi) 

Cycles per 
Flight 

Time per 
Flight 
(minutes) 

0.000 

25.6 


2.5 

0.000 

38.1* 

1 


0.000 

38.1* 


3,5 

0.000 

27.3 


6.0 


♦Every 20 flights, this stress is replaced with the pressure regulator malfunction 
stress, which is 40.6 ksi. 

The elliptical surface flaw is assumed to initially have aspect ratios, a/2c, of 0. 1 
and 0.4 (see sketch below). 
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The initial flaw size for each of these for 

zsztjzzzzz ~ -=* — — • 

ror 2219-TSO aluminum base metal at r.m 2 5~ 

material toughness parameter, Kj , isd-i.u V 1 footer and 

” rve> using this value of K lc in the equation for the stress intensity factor, and 
subluting?= oy for the proof test stress, the equatron becomes 


1.1 (51.0) m k ) 


32.0 = 


w - 0.212 (51.0/51.0)' 


i. i a tnv ’o' whioh is the maximum flaw size that would 

* shmdd ^ - : ^ r :;r 

of V so that a trial and error solution is necessary 
both aspect ratios of 0. 1 and 0,4, and the results follow. 

For a/2c = 0.1, the flaw screened by a proof test, a. 0.06195 inch. This value be- 
comes the initial flaw size, a,, for the flaw propagation studies. 

For a/ 2c = 0 4, the flaw that would be screened by a proof test turned out to be greeter 
of the tank wall, t . 0. 116 inch. An , — " - ""of 
an area equal to the area of a surface flaw of aspect ratio, a/2c - 0.4 on the verg 

leakage is calculated here. 



t = 0.116 


Area of flaw = —j— a=0.116inch Area = 0 . 02642 in 


The equation for 
follows: 


the stress intensity factor Kj, for the elliptical surface flaw, is as 
1. 1 o-yirya" (M ) 


K i 


(Reference 10, Equation IX-8) 


V <p 2 - 0.212 ( 0 / <Ty) 2 
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<7 = applied stress (ksi) 

<7 y = tensile yield stress = 51 ksi 

a = flaw size (inch) 

2 

0 = is a function which depends on the value of a/2c 


For 


a/2c = 0.1, 
a/2c = 0.4, 


0 = 1.10355 


0 = 2.01096 


on boai value of a/2c and a/t “ d is 

An equivalent through crack would have an area of (2c) x t 
(2c) x t = 0.02642 in 2 2c = 0.2278 inch 

This value becomes the initial size of the through crack in the flaw propagation studies. 

The critical flaw size of the elliptical surface flaw of aspect ratio a/2c = 0 1 is 
emulated ," a manner similar to that in which the tnittal flaw size was calculated, 
taining the minimum value of the material toughness parameter. Kr , from the mln- 

:r™ o rr ° f Figure 52 ° f **,-«*.«* ysa ^ 

, \ t», e , maximum stress from the applied pressure loads spectrum (a = 40 6 

ksi). The stress intensity factor equation then becomes 

1. 1 (40. 112) JtTJsl (M ) 

32.0 = VV_cr v K ' 


V0 2 - 


0.212 (40.112/51.0)' 


L X 1 ” W ! m< ? &cr = °- 08053 inch - The critical fl aw size for the through 
flaw is found by using the same minimum K Iq value of 32. 0 ksi and the same 

b^clmes 6SS ‘ 6 kSi ' H ° WeVer ’ the equation for the thr ° u g h crack now 


*1 = 




cr 




(C/Cy)' 


or 


32.0 = 


40.6 v/iTy^cf 


cr 


V 2 - (40.6/51. 0) 2 
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Solving this equation for (2c) cr , we find (2c) cr 0.2798 inch. 

Results of flaw growth calculations: 

Elliptical Surface Flaw, a/2c = 0.1 (see Figure 5-16).. 

Starting with &i = 0.06195 inch, it took 626 flights for the flaw to grow to a cr = 
0.08053 inch (scatter factor of 1.5 used on flights) as shown in Figure 5-16. 

Through Flaw (see Figure 5-17). 

Starting with 2ct = 0. 2278 inch, it took 160 flights for the flaw to grow to <2c) or = 
0. 2798 inch (scatter factor of 1. 5 used on flights). 



Figure 5-16. Crack Growth in LHg Tank for Pressure Load 
Spectrum (Surface Flaw, a/2c =0.1) 
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0.30 


SURF AC E FLAW a/2c =0.4 | _ , 

ABOUT TO LEAK — K— 2c -j 

rH. i 

<2c) 

br -= 0.2798 INCH 


0.116 

NOTE: SCATTER FACTOR OF 
1. 5 ON LIFE INCLUDED 
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TO TA 

JGHTS 

JLURE 

EQUIV. THRU CRACK - 
20i = 0.2278 INCH 

FLIGHTS TO LEAK = 1 


1 1 1 L-LLU 

1 1/ 

1 1 i i i i i i 

i 

1 i 


NUMBER OF FLIGHTS 


Figure 5-17 . Crack Growth in LH 2 Tank for Pressure 
Load Spectrum (Surface Flaw, a/2c = 0.4 
and Equivalent Through Crack) 

5.3.2 LH 2 TANK PROOF FACTOR AND APPAR ENT FACTORS OF SAFETY. For final 
verification of the structural integrity of the main Space Shuttle booster LH tank, pri- 
mary reliance is placed in a pressure proof test of each tank prior to assembly into the 
booster vehicle. 

The proof test logic is explaned in detail in Reference 19, Fracture Control of Metallic 
Pressure Vessels, NASA SP8040. The proof test consists of loading the tanks to a 
stress level greater than the maximum stress level expected in service. In addition 
the proof test should be conducted at a temperature consistent with the operating tempera- 
ture. If the proof test is completed successfully, the proof test provides assurance that 
all existing flaws or defects are less than the critical size required for fracture at the 
proof stress level. In addition, the safe -life of the tank at the operating stress level can 
be determined by fracture mechanics analysis where the safe -life ensured by the proof 
test is the time required to grow the smaller "proof stress flaw" to the larger critical 
size associated with the maximum service operating stress. The task consists of de- 
veloping a Kj./Ki c versus number of flight curve by integrating the combined cyclic and 
sustained load flaw growth over arbitrarily selected flight increments using the flight 
pressure load spectrum and the flaw growth data. The final curve for the LH 0 tank is 
presented in Figure 5-18. 2 
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Figure 5-18. LHg Tank Stress Intensity Ratio Versus Flights to Failure 
the scatter factor of 1.5 multiplied by the design service Ufe of 100 flights . Th 



1 

0.882 


1.13 


i 


•Comparison of the number of flights to failure computed J’^^nimber 

difference between the actual computed value <* -**j*^ # ^ mary reasons for 
of flights to failure used to determine toe ^f—^n a^sTpttons and data used 
the difference in the lives calculated are the 5 _ 18 and the LH 2 tank 

to generate the versus flights to failure ‘ n J^, ication for both analysis 

safe-life analysis 'of Section 5.3.1. Mtho^hdeep flaw m^ icatio, ^ ^ 

was used, each analysis assumes different skin toicknesses no i” 

utilizes different flaw growth date. Therefore ^"^^^Tfector should 
fee safe-life analysis and toe 100 missions used to determine toe proo 

not be expected. 
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The LH 2 tank is proof tested as illustrated in Figure 2-18. For the LH 2 tank, a one- 
stage proof test using void reducing plastic balls and room temperature dry air at 29,8 
psi pressure is selected. Due to other design conditions, the one-stage proof test re- 
sults in a small but accptable weight penality in the forward portion of the tank where 
the proof pressure exceeds that required. 

Due to the reduced limit design stresses required by the proof test for the safe -life of 
the tank, there is an apparent ultimate factor of safety that results, and it is given by 
the expression: 

F 

FS (apparent) = 

limit 

The apparent ultimate factors of safety for the LH 2 tank areas designed by proof pres- 
sure are: 

Upper Dome . Since the upper dome is designed by proof pressure , the apparent ulti- 
mate factor of safety is calculated to compare to the nominal ultimate safety factor of 
1.4. 

F = 63,000 psi (2219-T87 at RT) 

vU 

f (limiting operating) = 39,900 psi 

FS u (apparent) = - 1.58 

Skins . At the forward end of the cylindrical section of the tank near the bottom center- 
line, the skin thickness is designed by proof pressure. In this area, 

F. = 63,000 psi (2219-T87 at RT) 
tu 

f (limit operating) = ^ = 38,200 psi 

t 0.116 

FS u (apparent) * SH8 ‘ 1 -« 

In both cases the apparent FS u is greater than the nominal baseline FS U of 1.4. 

5.3.3 LHp TANK WEIGHT SENSITIVITY TO FLAW GROWTH SCATTER FACTOR 
PERTURBATIONS . The forward LHg tank dome is designed by proof pressure, and 
its weight is therefore sensitive to perturbations of the flaw growth scatter factor. The 
procedure for determining the weight of the dome for the various scatter factors is 
presented in Section 5.2.2. Although the lower LHg dome is not designed by proof 
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pressure for the baseline, the lower dome could become proof design critical if fee 
FS were low enough. Therefore the weight sensitivity of both the LH 2 tank end dome, 
to flaw growth scatter factor perturbations is presented in Figure - . 

5 3 4 LHo TANK SAFE-LIFE SENSIT IVIT Y TO FACTOR OF SAFETY MM 
GROWto" fcATTER FACTOR. Figure 5-20 presents the effect of ultimate and yiel 
S safety on die pr ^II a nt tank safe-life with a yield factor of safety ^ing^proof 

test maintained at a constant value of 1 . 0 , (1 . e . , FSy 1 . 0 dur ng pr • 

curves were developed from the stress intensity ratio versus number of flight curves 
(see Figure 5-18) for the LH 2 tank. These curves were generated assuming a semi 
lllipti Jd surface flaw in the tank walls and that the flaws propagated to failure under 
“"L applied pressure load!,* spectrum. The LH, tank wall was assumed 

to be at 70° F and to have the following material properties. 


Property/Temperature 70 °!? 

F (ksi) 63 -° 

tu 

F (ksi) 51 *° 

ty 

Kj (ksi i/fn7) 32 *° 

c 

The curves of stress intensity ratio versus flights to failure were converted to apparent 
ultimate and yield factors of safety through the following relationships: 

Kj /Kj = 1/a 

i c 

■p = F /a (based on FS =1.0 during proof test) 

"limit tV y 


<W 


. - m S 

FS u (apparent) = F tu / f limit = 

i c 


FS y (apparent) = ~ (Kj/Kj ). 

i c 

The sensitivity of f^ire^ov^l^ftat fce^ safe^ffe r <^crchses 

^increased above the hasel.ne value 1.8. 


FACTOR OF SAFETY 








SAFE-LIFE (FLAW GROWTH TO FAILURE). (mUrion.) 


5.4 AFT ORBITER SUPPORT FRAME 


5.4.1 attt ORRTTE R SUPPORT FRAME 
SAFE -LIFE ANALYSIS . In the analysis 
of the aft orbiter support frame , one of 
the frame flanges was assumed to contain 
a corner crack of an initial size of 0.1 
inch, or a crack having a length of 0.1 
inch emanating from a hole . This initial 
size was chosen based on a judgment of 
the capability of nondestructive evaluation. 

The aft orbiter attachment frame loading 
spectrum experienced by this flaw config- 
uration is essentially the same spectrum 
that was used in the safe-life determina- 
tion for fatigue crack initiation listed in 
Table 4-4. The only change made was to 
convert the spectrum, which is for 100 
missions, to a spectrum for only one 
mission. The results of this modification 
and the final aft orbiter support frame 
loading spectrum are listed in Table 5-1. 




Figure 5-21. LH 2 Tank Safe-Life (Flaw 
Growth to Failure) Versus 
Scatter Factor 





Hie crack growth studies were done on the aft orbiter support frame assuming the 
structure was maintained at room temperature. Thus room temperature properties 
were assumed and crack growth rate curves for 2219-T87 aluminum base metal at 
room temperature were used in the flaw propagation computer program 

5.4.1. 1 Corner Crack 



The equation for the maximum stress intensity factor for a corner crack is 


K 


q- \/~7ra (0.705) 

7 1 - 0. 177 (ct/ct ) 2 

y 


<r = applied stress 
< 7^ — tensile yield stress 
a = flaw size 


(Reference 10, Equation VII-7 modified to 
account for the plastic zone correction) 


The critical value of the material toughness parameter, Kj , used here for the 2219- 
T87 aluminum base metal at room temperature was Kj = §2.0 ksi /inch (Reference 
14, Figure 52, lower curve). The tensile yield stress used was a = 51.0 ksi. The 
maximum operating stress occurring in the support frame can be found from the spec- 
trum to be cr = 32. 000 ksi. 

Substituting all these values into the stress intensity factor equation results in 

32.000 /tt a (0.705) 

32.0 = Cr 

Jl- 0.177 (32. 000/51. 000) 2 

This equation can be solved for the critical value of 'a', which turns out to be a 
= 0. 5958 inch. cr 

Under the influence of the applied loading spectrum, the initial flaw of size a = 0.100 
inch grew only 0.00004 inch in 4000 flights. Consequently, the safe-life of this struc- 
tural component can be considered to be extremely large. 
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B 4 1 2 Crack Emanating f rom Hole . The loading spectrum, material properties, 
and maximum operating stress will be the same as those used in the crack growth 
analysis of a corner crack, above. Substituting the appropriate values into the 
equation for the stress intensity factor for a crack emanating from a hole results in 

the following expression: 

32.0 I (-18.42 a cr )- 

Cr = = 1.0 + 2.06 

- 0.177 (32.0/51.0) [ 

This expression is solved by a trial and error method for the critical value of 'a', 

which turns out to be a = 0.29063 inch. 

cr 

Under the influence of the applied loading spectrum, the initial flaw (a t - 0.100 inch) 
grew 0.01815 inch to a = 0.11815 inch in 2667 flights, using a scatter factor of 1.5 on 

the number of flights to failure. 

Since the initial flaw of size 0.100 inch grew only 0.01815 inch in 2667 flights, and 
since the critical flaw size for this structural component has been shown to be a cr 
= 0.29063 inch, the safe-life of this structural component can be considered to be ex- 
tremely large. 



5.4.2 AFT ORBIT ER SUPPO R T FRAME SAFE-LIFE SEN SITIVITY TO FACTOR OF 
SAFETY ! The type of flaw assumed to be present in the structure for this analysis is 
a through crack emanating from a hole. This situation is most critical due to the 
stress concentration gradient in the vicinity of the hole. The equation for the stress 
intensity factor for this type of flaw is 


K 


cr/iFa 


(GKT) 


where 


GKT 


1-0.177 (a /a ) 

ys 


factor to account for the stress concentration in the vicinity of the 
hole. 


The initial flaw size is assumed to be 0.100 inches. This phased upon * n ® f^DDlied 
of NDE capability. The flaw is propagated to failure under the influence PP 

loading spectrum for the aft orbiter support bulkhead. The loading spectrum . with a 
maximum applied stress level of 32. 0 ksi, is equivalent to a factor of safety of 
Factor of safety can be related to the maximum stress level in the spectrum 

ing to the equation 


FS = 1.4 
u 


'32.0 


max 
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Therefore by varying the maximum stress level in the applied loading spectrum, the 
factor of safety can also be varied. Figure 5-22 is a plot of the applied stress level 
versus the critical flaw size. The effect on the safe-life of the bulkhead of varying 
the factor of safety is presented in Figure 5-23. The load spectrum for aft orbiter 
support bulkhead for F^ = 1.4 is shown in Table 5-1. 



Figure 5-22. Aft Orbiter Support Frame Critical Flaw Size Versus Applied Stress 
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Figure 5-23. Aft Orbiter Support Frame Safe-Life Versus Factor of Safety 
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5.5 WING BOX 


5 5 1 WING SPAR C APS SAFE -LIFE ANALYSIS . In the analysis of the wing spar 
caps, these members were assumed to contain two types of flaws: a corner cra ° ° 
an initial size of 0. 1 inch (see sketch below), and a crack of 0. 1 inch initial length 
emanating from a fastener hole. The initial size of the cracks was chosen based on 
judgment of the capabilities of nondestructive evaluation. 

The wing loading spectrum experienced by the flaws described above is essentially 
the same spectrum as was used in the wing fatigue analysis and found in Table 4-6. 
Certain necessary modifications were made, however, to use this spectrum in the 
crack growth study. These included the addition of some sustained load, which while 
not necessary for fatigue analysis can be of great significance in crack grow ana y- 
sis and the reduction of the spectrum, which is for 100 missions, to a spectrum o 
only one mission. The results of these modifications and the final wing loading spec- 
trum can be found in Table 5-2. This spectrum is a very severe loading spectrum, 
much more so than experienced by any of the other components being analyzed in this 

study. 

The crack growth studies were done on the wing assuming the spar caps were main- 
tained at room temperature . Thus room temperature properties were assume an 
crack growth rate curves for Ti-6A1-4V annealed titanium base metal at room tem- 
perature were used in the flaw propagation computer program. 

5.5.1. 1 Corner Crack . The configuration of the corner crack assumed for the flaw 
growth analysis was as shown in the sketch. 


SPAR 

CAP 

FLANGE 



The maximum stress intensity factor equation for a corner crack is 
_ qv/iryMO.705) 


*1 


V i - (k 


177 <o/ff Y ) 


where 


(j = applied tensile stress 
c = tensile yield stress 
a = flaw size 
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Table 5-2. Wing Spar Cap Loading Spectrum 


Flight 

Phase 

^Mean 

(ksi) 

O'Alt 

(ksi) 

Cycles per Flight 
(Unless Otherwise Noted) 

Ascent 

0. 

000 

1.368 

900 





2.280 

90 





3.192 

9 





4. 104 

1 



0. 

000 

5.016 

1 cycle every 10 flights 



13. 

680 

3.192 

900 





4.560 

90 





5.928 

9 



I 


7.296 

1 



13.680 

8.208 

1 cycle every 10 flights 



0.000 

5.016 

900 





8.208 

90 





11.400 

9 





14.136 

1 



0. 

OOO 

16.872 

1 cycle every 10 flights 



36 . 

480 

7.296 

900 





13.224 

90 





19.152 

9 





24.624 

1 



36.480 

30.096 

1 cycle every 10 flights 



9.; 

L20 

9.576 

900 





16.872 

90 





27.360 

9 





41.040 

1 



9. 120 

! 55.176 

1 cycle every 10 flights 



13.680 

12.312 

900 





18.240 

90 





33.744 

9 





55.632 

1 

Ascent 

13.680 

72.960 

1 cycle every 10 flights 

Ent 

ry 

6.840 

6.840 

900 



12.312 

12.312 

90 



16.872 

16.872 

5 



20.976 

20. 976 

2.5 



33.744 

33.744 

1.5 



42.864 

42.864 

1 



42.864 

42.864 

1 minute sustained load per flight 



45.600 

45.600 

1 cycle every 10 flights 

Entry 

45 . 600 

45.600 

1 minute sustained load every 10 flights 

Cruise/ 

18.240 

19. 152 

1800 

Landing 



23.712 

180 





29. 184 

18 





34.656 

2 

Cruise/ 

18.240 

40. 128 

2 cycles every 10 flights 

Landing 
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The critical value of the material toughness parameter, Kj used here for the Ti- 
6AI-4V annealed titanium base metal as room temperature \vas Ki c = 78.0 ks Winch 
(Reference 16, Figure 35, Page 89).. The tensile yield stress used was cry - 120.0 ksi. 
The maximum operating stress occurring in the spar cap can be found from the spec- 
trum to be <7 = 91. 2 ksi. Substituting all these values into the stress intensity factor 

equation results in 


78.0 = 


(91.2) /F/i (0.705) 


VT- 


0. 177 (91.2/120.0) 


This expression can be solved for the critical value of 'a', which turns out to be 
= 0.42057 inch. 


a 


cr 


Results of flaw growth calculations: 

Under the influence of the applied loading spectrum, it took 31 flights for the initial 
flaw size of a, = 0. 100 inch to grow to the critical flaw a cr = 0.42057 inch. The reason 
for the very small number of flights to failure is undoubtedly the very severe loadmg 
spectrum experienced by the spar cap. It differs from the other components in this 
study in that it experiences extreme loads during the entry and cruise/landing flight 
phases as well as the ascent phase. The flaw growth is shown in Figure 5-24. 
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5 • 5 . 1 • 2 Crack Emanating from Hole . The flaw configuration investigated in this 
section is as shown in the sketch. The length of the flaw is specified by T a\ the diam- 
eter of the hole is 'D', and the applied tensile stress is 'cr\ 

The equation for the stress intensity factor at the tip of the crack is 


K = q-\flTa (GKT) 

I j (Reference 10, Equation VII-10 modified to 

Y 1 - 0.177 (<r/a account for the plastic zone correction) 

a = applied tensile stress (ksi) 
a = tensile yield stress (ksi) 

a = crack length (inches) 


The quantity GKT in the equation is a factor included to account for the stress gradient 
due to the introduction of the hole into the uniform stress field. It can be thought of as 
a stress concentration factor. The quantity GKT has a maximum value (GMAX) at the 
periphery of the hole and decays exponentially to a minimum value (GMIN) at some 
specified distance (AREF) from the edge of the hole (see sketch on next page). 
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The curve for GKT is defined by the equation 


GKT = GMIN + (GMAX - GMIN) e 


/-4.605 a\ 
\ AREF / 


From the equation, it can be seen that AREF is actually the length at which 99% of the 
difference between GMAX and GMIN is reached. In other words, if 

a = AREF, then GKT = GMIN + 0.01 (GMAX - GMIN). 

With GKT defined as shown, the equation for the stress intensity factor becomes 


K i = 7=== 

V 1 - 0.177 (o/a y ) 


GMIN + (GMAX - GMIN) e 


/-4.605a\ 
\ AREF / 
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For this portion of the study a value of 3.0 was used for GMAX, 1. 0 was used for 
GMIN, and AREF was taken to be 0. 250 inch (one hole diameter). Figure 5-25 is a 
plot of GKT versus a/AREF for GMAX = 3.0 and GMIN = 1.0. With the specified 
values for GMAX, GMIN, and AREF, the equation for the stress intensity factor 
becomes 


K = 


(T 


s/ira 


1 


177 (a/<r ) 


1.0 + 2.0e (“18.42 a)* 


This is the final form of the stress intensity factor used in this portion of the study. 
By substituting values for the maximum operating stress in the spectrum (a) , the 
tensile yield stress (ay), and the critical value of Kj (Kj was used here), the critical 
crack length (a cr ) can be found from this equation using a trial and error method. 


The wing material is taken to be Ti-6A1-4V annealed titanium maintained at room 
temperature. Therefore, the following material properties are used: 

Kj = 78. 0 ksi n/ inch (Reference 16, Figure 35, Page 89) 
c 

a- = 120. 0 ksi 


Again using the wing loading spectrum of Table 5-2, . the maximum operating stress 
is found from the applied loading spectrum to be cr = 91. 2 ksi. Substituting this 
stress and the appropriate material properties into the equation for the stress inten- 
sity factor for a crack emanating from a hole results in the following expression: 


78.0 


91. 2 Vt 

\/l - 0.177 (91.2/120. 0) 2 


1.0 + 2.0 e 


(-18.42a ) 
cr 


This expression is solved by a trial and error method for the critical value of 'a', 

which turns out to be a = 0. 18308 inch. 

cr 


Under the influence of the applied loading spectrum, it took three flights for the ini- 
tial flaw = 0.100 inch) to grow to the critical flaw size (a cr = 0. 18308 inch), in- 
cluding a scatter factor of 1. 5 on the number of flights to failure. 
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Figure 5-25. Stress Intensity Factor (AKj) Multiple for a 
Crack Initiating at a Fastener Hole 


The small number of flights to failure can be attributed to two things. First is 
fact that the loading spectrum experienced by the wing spar cap is an extreme y 
severe spectrum in that it incorporates high magnitude loads during the entry an 
cruise/landing flight phases as well as the ascent phase. Secondly, the flaw co gur 
tion being investigated here is a very critical configuration, especially since a stress 
gradient multiplication factor is being used on the stress intensity factor to accoun 
for the stress concentration around the hole. Consequently, the critica aw size s 
not much greater than the initial flaw size, meaning the flaw does not have to grow 
very much to reach the critical size, 

5 5 . 1.3 Determination of Acceptable Safe-Life Str ess Level for Spar Caps. In the 
analysis of the wing for a crack emanating from a hole, the results s ^ow ttot the 
initial crack ( ai = 0.100 inch) grows to the critical size <a cr = 0.18308 Inch) m just 
three flights. Due to the fact that the number of flights to failure is so small, a s y 
was undertaken to determine the allowable maximum limit stress level that would re- 
sult in an acceptable safe-life of 100 missions. 


The loading spectrum used in the initial analysis of a crack emanating om a °_ e ” 
the wing spar cap is based on a maximum limit operating stress level of OMAX ~ 
ksi (see Table 5-2). The procedure UBed here consists of reducing this maximum 
limit stress level by some percentage, calculating a new critical flaw size based on 
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o-/ 91.2 


the new maximum stress level, and then propagating an initial flaw size a^ = 0.100 
inch to failure using a reduced applied loading spectrum based on the reduced maximum 
stress level. The critical flaw sizes (a cr ) were found using the following expression: 


78.0 = 


q/T /a - 
cr 


V 


1 - 0.177 (a /120.0) 


[l. 0 + 2. 


0 e 


(-18.42 a ) 


cr 


By substituting values of the stress level (a ) into this equation, the critical flaw size 
(a cr ) can be found for the stress level by using a trial and error method. Figure 5-26 
is a plot of stress level versus critical flaw size for a crack emanating from a hole in 
the wing spar cap. 



Figure 5-26. Stress Level Versus Critical Flaw Size for the Titanium Wing Spar Caps 
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After determining the critical flaw size for various maximum stress levels, an initial 
flaw of size aj = 0.100 inch was propagated to failure for the various levels and tiie 
curve of Figure 5-27 was obtained. From this curve it can be seen that to obtain a 
safe-life of 100 missions, the maximum allowable operating stress level must be re= = 
duced to 50% of the original maximum stress level. In other words, all load levels 
in the applied loading spectrum must be reduced by 50% so that an initial crack of 
size aj = 0.100 inch emanating from a hole will reach criticality in 100 missions, 
using a scatter factor of 1.5 on the number of missions. 




5.5.2 WING SPAR CAPS SAFE -LIFE SENSITIVITY TO FACTOR OF SAFETY AND 
FLAW GROWTH SCATTER FACTOR . The type of flaw assumed to be present in the 
structure for this analysis is a through-crack emanating from a hole. This configura- 
tion is most critical due to the stress concentration gradient in the vicinity of the hole. 
The equation for die stress intensity factor for this type of flaw is 


•S 


o /F /a* 


- 0.177 (a h 



(GKT) 


where GKT, the factor to account the stress concentration in the vicinity of the hole, 
is derived in Section 5. 5. 1.2, The initial flaw size (aj) is assumed to be 0.100 inch. 
This is based on an estimate of NDE capability. The flaw is propagated to failure under 
the influence of the applied loading spectrum for the wing. The loading spectrum, with 
a maximum applied stress level of 91.2 ksi, is equivalent to a factor of safely of 1.4. 
Factor of safety can be related to the maximum stress level in the spectrum accord- 
ing to the equation 


FS 

u 


1.4 


F-) 

max / 


The effect on the safe-life of the wing of varying the factor of safety and the associated 
maximum stress level is presented in Figure 5-28. The sensitivity of the safe-life of 
the baseline wing spar caps to flaw growth scatter factor variations is presented in 
Figure 5-29. The figure shows that the safe-life of the baseline wing spar caps is in- 
adequate regardless of the scatter factor. 


5.6 THRUST STRUCTURE 


5.6.1 THRUST BEAM CAP SAFE-LIFE ANALYSIS . For the thrust structure beams, 
as for the wing spar caps, a safe-life analysis was carried out using two types of ini- 
tial flaws: a corner crack, and a crack emanating from a fastener hole. 

The thrust structure loading spectrum used in the safe-life analysis is the same as 
that used in the fatigue life determination and shown in Table 4-5. 

5. 6. 1.1 Comer Crack . In the analysis of the thrust structure, one of the thrust 
beam tension caps was assumed to contain a corner crack of an initial size of 0.1 inch 
(see sketch on following page). This initial size was chosen based on a judgment of 
the capability of nondestructive evaluation. 
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The crack growth studies were done on the thrust structure assuming it was main- 
tained at room temperature. Thus room temperature properties were assumed, and 
crack growth rate curves for TI-6A1-4V annealed titanium base metal at room tern- 
perature were used in the flaw propagation computer program. 

The equation for the maximum stress intensity factor for a corner crack is 


T , a 7ra (0.705) 

1 ~~ / 2 

y 1 - 0. 177 (<r/<7 y ) 


This is Equation VII -7 from Reference 10 modified to account for the plastic zone 
correction. 



Figure 5-28. Wing Spar Caps Factor of Safety Versus Safe-Life 
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Figure 5-29. Wing Spar Caps Safe-Life (Flaw 
Growth to Failure) Versus 
Scatter Factor 


< t = applied stress 
< r = yield stress 
a = flaw size 

The critical value of the material 
toughness parameter, Kj , used here 
for the Ti-6A1-4V annealed titanium 
base metal at room temperature was 
Kj = 78.0 ksi /Inch (Reference 16, 
Figure 35, Page 89). The tensile 
yield stress used was a Y = 120. 0 
ksi. The maximum operating stress 
occurring in the thrust beam cap can 
be found from the spectrum to be = 
92.9 ksi. Substituting all these values 
into the stress intensity factor equa- 
tion results in 

92.9 Jv a (0.705) 

_ v cr 

- 0.177 (92. 9/120. 0) 2 

This equation can be solved for the 
critical vaule of 'a, ' which turns out 
to be a(; r = 0.4036 inch. 



Under the influence of the applied loading spectrum, it took 1555 flights for the initial 
flaw of size a i = 0,100 inch to grow to the critical flaw size of a cr = 0.4036 inch. 
Figure 5-30 is a plot of flaw size versus flights. A scatter factor of 1.5 was used on 
the number of flights to failure. 


5 . 6 . 1 . 2 Crack Emanating From Hole . The flaw configuration and method of analysis 
for determining the growth of a crack emanating from a hole is the same as was used 
in the wing spar cap safe -life analysis and shown in Section 5. 5. 1.2. 

The maximum operating stress is found from the applied loading spectrum to be 
cr = 92.9 ksi. Substituting this stress and the appropriate material properties into 
the equation for the stress intensity factor for a crack emanating from a hole results 
in the following expression: 

(92.9 )n/5T s/a 

cr 

78.0 = 

VI - 0.177 (92. 9/120. 0) 2 


(-18.42 a ) 

1. 0 + 2.0 e 
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Figure 5-30. Crack Growth in the Titanium Thrust Beam 
Caps (Flaw Configuration — Comer Crack) 


This expression is solved by a trial and error method for the critical value of 'a,’ 

which turns out to be a = 0.1694 inch. 

cr 

Under the influence of the applied loading spectrum, it took 101 flights for the initial 
flaw (a- = 0.100 inch) to grow to the critical flaw size (a cr = 0.1694 inch). Note here 
that a scatter factor of 1. 5 was used on the number of flights to failure. Figure 5-31 
is a plot of flaw size versus flights. 

5.6.2 THRUST BEAM CAP SAFE -LIFE SENSITIVITY TO FACTOR OF SAFETY AND_ 
FLAW GROWTH SCATTE R FACTOR . The type of flaw assumed to be present i p th e s 
structure for this analysis is a through-crack emanating from a hole . .This configura- 
tion is most critical due to the stress concentration gradient in the vicinity of the hole. 
The method of analysis for this configuration was presented in Section 5.5. The initial 
flaw size is assumed to be 0.10 inch based on a judgment of NDE capability. The 
factor of safety can be related to the maximum stress level in the spectrum according 

to the equation 


FS = 1.4 
u 


' 91.2 \ 

<J I 
\ max/ 
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Figure 5-31. Crack Growth in the Titanium Thrust Beam Caps (Flaw 
Configuration — Crack Emanating from a Hole) 


Therefore, by varying the maximum stress level in the applied loading spectrum the 
factor of safety can also be varied. The effect of varying the factor of safety and cor- 
responding stress levels on the critical flaw size and the number of flights to failure 
can be found in Figures 5-32 and 5-33 respectively. 

The sensitivity of the safe-life of the baseline thrust beam caps to flaw growth scatter 
factor variations is presented in Figure 5-34. The figure shows that any increase of 
the scatter factor above the baseline value of 1.5 will reduce the safe-life of the thrust 
beam caps below the acceptable level of 100 missions. 

5.7 VERTICAL TAIL 

VERTICAL TAIL SAFE -LIFE ANALYSIS . The flaw growth analysis of the ver- 
tical tail was done assuming that there was an initial through crack in the skin of 
length (2c). = 1.00 inch (see sketch below). This initial size was chosen based on a 
judgment of the capability of nondestructive evaluation. 
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Figure 5-32 . Thrust Structure Ultimate Factor of 
Safety Versus Critical Flaw Size 



Figure 5-33. Thrust Structure Factor of Safety Versus Safe-Life 
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FLAW GROWTH SCATTER FACTOn 


The vertical tail loading spectrum experi- 
enced by the flaw configuration shown in the 
sketch is essentially the same spectrum that 
was used in the fatigue life determination. 

The crack growth studies were done on the 
vertical tail assuming the structure was 
maintained at room temperature . Thus 
room temperature properties were assum- 
ed and crack growth rate curves for Ti- 
6A1-4V annealed titanium base metal at 
room temperature were used in the flaw 
propagation computer program. 

The equation for the maximum stress inten- 
sity factor for a through crack of length 2c 
is: 

K _ cr n/tT \j2c_ (Reference 18, 

1 ‘V 2 - ^ 28) 


Figure 5-34. Thrust Beam Caps Safe- 
Life (Flaw Growth to 
Failure) Versus Scatter 
Factor 


where 

<T = applied stress 

O' = tensile yield stress 


The critical value of the material toughness parameter, Kj , used here for the Ti- 
6A1-4V annealed titanium base metal at room temperature was Kj =78.0 ksi \/inch. 
(Reference 16, Figure 35, Page 89). The tensile yield stress was 0 oy = 120.0 ksi. 
The maximum operating stress in the vertical tail can be found from the spectrum* to 
be o = 30. 940 ksi. Substituting all these values into the stress intensity factor equa- 
tion results in: 


30.940 s/7 s/(2cj 
78.0 = - ■ cr 

Y 2 - (30. 940/120. 0) 2 

This equation can be solved for the critical value of 2c, which turns out to be (2c) OT , 

= 3.9115 inches. ° 

Under the influence of the applied loading spectrum, it took 534 flights for the initial 
flaw of size (2c)^ = 1.00 inch to grow to the critical flaw size of (2c) cr = 3.9115 inch- 
es. Note here that a scatter factor of l. 5 has been used on the number of flights to 
failure. A plot of flaw size versus flights to failure can be found in Figure 5-35. 
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Figure 5-35. Crack Growth in the Vertical Tail Skin 


5.7.2 VERTICA I TAIL SENSITIVITY TO FACTO R OF SAFETT Mg 

FLAW GROWTH SCATTER FACTOR . The type of flaw assumed to be present in the 
structure for this analysis is a through-crack of 1.00 inch length, based on an estimate 
of NDE capability. The equation for the stress intensity factor for this type of flaw 


*1 = 


cr/2ctT 


I 2 ' < cr/cr ys ) 


where 


2c = flaw size 


The basic applied loading spectrum for the vertical tail is shown m * 

stresses in this spectrum correspond to an ultimate factor of safety of . . gu 
5-36 is a plot of applied stress versus flaw size for a through-crack under th 
ence If fee basic allied load spectrum. The ultimate factor of safety can be related 
to the limit stress level in the spectrum according to the equation 


FS = 1.4 
u 


34.0 \ 


limit 


) 


Therefore by varying the limit stress, the factor of safety can also be varied. The 
effect o/vaiyt ng'di^ factor of safety and corresponding stress levels on the number of 

flights to failure is presented in Figure 5-37. 
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Figure 5-36. Applied Stress Versus Critical Crack Length for a Through-Crack 
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Figure 5-37 . Vertical Tail Ultimate Factor of Safety Versus Safe-Life 
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SAFE-LIFE (FLAW GROWTH TO FAILURE), (missions) 



Figure 5-38. Vertical Tail Safe-Life (Flaw 
Growth to Failure) Versus 
Scatter Factor 


The sensitivity of the safe -life of the 
baseline verical tail to flaw growth 
scatter factor variations is presented 
in Figure 5-38. The figure shows that 
although safe -life drops rapidly for 
increases of the scatter factor from 
the baseline value of 1.5, the safe- 
life of the vertical tail remains at an 
adequate level for scatter factors as 
high as 8. 

5.8 CREW MODULE 

This section presents the safe-life 
analysis of the crew module . Since 
the critical flaw size is greater than 
the thickness of the crew module skin, 
the type of flaw assumed to be present 
in the structure for this analysis is a 
through-crack. Various size initial 
cracks were assumed. 


The basic applied loading spectrum for the crew module is 


mm 

(ksi) 

0 

0 


max 

(ksi) 

15.0 

8.5 


Cycles per 
Flight 

1 

1 


Time per Flight 

(min utes) 

10 

90 


Che stresses In this spectrum correspond to an app ^ ntU ^_ m J* CTeK 

l 2 The high apparent factor of safety was dictated by the requirement that the ere 
mxhilebe fail-safe . Figure 5-39 is a plot of applied stress versus critical crack _ 
enath for a through-crack under the influence of the applied load spectrum. Hie ulti 
^factor Sty can be related to toe maximum stress level in toe spectrum 

according to the equation 


FS = 4.2 
u 


15.0 


max 
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Figure 5 39. Crew Module Applied Stress for a Through- 
Crack Versus Critical Crack Length 

Therefore by varying the maximum stress, the factor of safety can also be varied. 

The effect of varying the ultimate factor of safety and corresponding stress levels on 
the number of flights to failure for various initial crack lengths is shown in Figure 
5-40. Investigation of the curves reveals that for an initial crack length of 2 . 00 inches 
and the baseline apparent factor of safety of 4.2 the safe-life is 1928 missions, which 
far exceeds the design service of 100 missions. Similarly for an initial flaw size of 
1.00 inch and the required 100 mission life, a factor of safely of 2.98 is required. 

This indicates that the fail-safe design of the crew module gives that structure a safe- 
life well in excess of what would have been necessary had the safe -life design philosophy 
been applied. Figure 5-41 presents the sensitivity of the baseline crew module safe- 
life to flaw growth scatter factor for various initial crack lengths. The figure shows 
that the crew module has adequate safe-life except for large initial crack sizes and 
large scatter factors. 

It should be noted that for the crew module, safe -life is only the period to the initiation 
of rapid flaw growth. Arrest of this rapid flaw growth occurs due to the fail-safe 
capability of the module . 
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SECTION 6 

FAIL-SAFE ANALYSIS 


Hie damage tolerance of each of the selected components is analytically determined 
below, as a measure of its fail-safe capability. Two criteria are used in judging ade- 
quacy of fail-safe design: ° 

a. In structure composed of a number of discrete elements (e.g. , the wing box), a 
crack can proceed to the point of complete failure of one principal member. The 
remaining structure must possess a residual strength capability of carrying 
critical limit design load without failure. 

b. In monolithic structures (e.g. , the integrally stiffened vertical tail box and pro- 
pellant tanks with crack stoppers) , fail-safe can be provided by fracture arrest 
of a rapidly propogating crack at crack stoppers such as stiffeners, straps, and 
doublers. The crack stoppers must be of sufficient size to arrest the crack under 
critical limit load conditions, and the arrested crack must be sufficient size to 
make detection certain prior to the next flight by normal preflight inspections. 
Monolithic structures are also considered fail-safe when the critical crack size 

for onset of rapid fracture is so large as to ensure detection prior to reaching 
critical size. 

The baseline aft orbiter support frame does not prossess fail-safe capability because 
of its monolithic construction. Therefore, it does not appear in tiiis section of the 
report. 

Since the baseline crew module is designed to be fail-safe, the fail-safe analysis of 

the crew module is presented in Section 3.7, which gives the baseline analysis of the 
component. 

6.1 LIQUID OXYGEN TANK 

6 ' 1 * 1 FAIL-SAFE ANALYSIS - LO p TANK S KIN UNDER INTERNAL PRESSURE. A 
longitudinal section through the tank skin was taken at the upper centerline just aft of 
the forward dome equator, for analysis of fail-safe capability. 


<1 WELD 

yzzzktzznmm 


t = 0.090 

Uiii l ezzzzzzzzzz 
— '121 


2. 5t = 0.225 


mznzmrz 


<L WELD 

t 

J . 


77/////J W/L 



6-1 


1 ; 


An initial flaw was assumed in the form of a through crack in the center of the panel. 
Since the weld and frame lands are so widely spaced, the tank skin panel was assume 
to be of infinite width. Other assumptions were: 


a. Material is 2219-T87 . 

b. Temperature is room temperature. 

c . Gross hoop stress is 42 . 8 ksi , resulting from maximum relief valve pressure 
(see Table 4-1), 

Determination of Critical Hoop Stress for the Onset of Crack Instability: 


where 


<j = 

c 


?ra + r (1 + C 

° 2a*' 

yB 


(Equation IX-14 of Reference 10) 


a = initial crack half length 

K = critical stress intensity factor, assumed as 2 Kj c = 64 ksi \/mch 

C = bulge correction, shown as 9.5 for 2024-T3 in Table XVI of Refer- 
ence 10. This value is used here for 2219-T87 . 

R = radius of curvature = 198 inches 
o- = material yield strength in a 2:1 biaxial stress field, assumed to be 
yB 1.25 F ty or 64 ksi 

Solution of the equation for a range of values of a,, gives values of cr c that are piotted 
as a versus 2a in Figure 6-1. They indicate a critical initial crack length of slightly 
less than one inch at a hoop stress of 42.8 ksi. f 



Figure 6-1. LC >2 Tank Crack Arrest Effectiveness of Graphite/Epoxy Tear Straps 


In an effort to increase the critical crack length at this gross stress and to evaluate 
fail-safe tank concepts, crack arresters in the form of graphite/epoxy straps were 
tried. The straps were assumed to have a 0. 50 by 3. 00-inch section of HT-S/X904 
unidirectional graphite/epoxy with the following properties: 

F = 168 ksi 

tU 3 

E = 20 ksi x 10 


Section at Strap: 



6-3 



Determination of the effectiveness of the Graphite/Epoxy tear straps to arrest un- 
stable crack is evaluated by the following method for various strap s pacings and hoop 
stress levels. The method is: 

a. The applied stress intensity for a centrally located crack of variable length be- 
tween the straps is determined by the method of Reference 18 which accounts for 
the presence of straps where: 

K = C a /Fa 

C = stress intensity correction factor 

A typical plot of applied stress intensity versus crack size is presented in Fig- 
ure 6-2. 

b. It is hypothesized that the stress level or strap spacing which causes the applied 
stress intensity curve to fall below Ihe critical stress intensity factor (KJ of the 
skin panel (i.e. , fracture toughness) will cause dynamic fracture arrest and a 
fail-safe structural arrangement. This condition is illustrated in Figure 6-2 , 

The values of strap spacings and stress levels which satisfy this fracture arrest 
hypothesis are plotted in Figure 6-1. 

Also plotted in Figure 6-1 is the total weight of straps on the LOg tank for the 
strap spacings shown. The curve shows that the weight penalty required to pro- 
vide fracture arrest at a hoop design stress of 42.8 ksi is 3300 pounds. Since 
this is an 18%weight penalty on the L0 2 tank, it is considered impractical to use 
these crack arrest straps. 

6.1.2 SENSITIVITY OF LQ 2 TANK FAIL-SAFE CAPABILITY TO FACTOR OF S AFETY 
PERTURBATIONS . An initial crack in the longitudinal direction in the form of a through - 
crack in the center of a panel was assumed. The crack is loaded transversely by hoop 
tension due to internal tank pressure. The crack location is on the upper centerline 
just aft of the forward dome equator. The material is 2219-T87 aluminum at room 
temperature. For the baseline, the gross limit hoop stress is 42.8 ksi. Figure 6-3 
presents the critical initial flaw size, 2a 0 , versus the ultimate factor of safety for 
the liquid oxygen tank. To obtain the critical initial flaw size, 2a 0 , for a particular 
factor of safety, the following procedure was used. The limit stress for a factor of 
safely was determined by use of the equations 

_ 1.4 (42.8) = 51 

a iimit FS limit FS 

u y 

depending on whether ultimate factor of safety or yield factor of safety is critical. 

Then taking a,, .. = a > the equation 
limit c 
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Figure 6-: 



Figure 6-2, LOg Tank Crack Arrest Effectiveness of Graphite/ 
Epoxy Tear Straps, 36-Inch Strap Spacing 



. L0 2 Tank Critical Initial Crack Length Versus Ultimate Factor of Safety 
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K 

c 



is solved for a Q . 

The LOo tank, practically speaking, has no fail-safe capability for internal pressure 
loads Decreases in factor of safety decrease what little residual strength a flawed 
tank has. Even large increases in the factor of safety don’t appreciably increase the 
fail-safe capability of the tank. The figure shows that for all factors of safety investi- 
gated, the critical initial crack length is much less than the frame spacing, and thus 
fail-safe capability can be obtained only by use of intermediate crack stoppers between 
the frames. This solution, however, imposes an inordinate weight penalty, and there- 
fore fail-safe capability is not practical even for increased safety factors. 


6.2 LIQUID HYDROGEN TANK 


6.2.1 FAIL -SAFE ANALYSIS - LH 0 TANK SKIN UNDER INTERNAL PRESSURE, 

The general constructional features of the LH 2 tank are similar to those of the LO£ 
tank. The assumptions for the fail-safe analysis were the same except for the gross 
hoop stress, which is 40.6 psi per Table 4-2, and the skin thickness, which is 0.116 
inch with 0.290 inch land thickness. 

For the tank without tear straps , the critical hoop stress is the same as for the L0 2 
tank for a given initial crack length. If tear straps were added similar to those shown 
for tiie LOo tank, the results would be similar to the L0 2 tank. A check was there- 
fore made on increasing the size of the straps from 1/2 by 3 inches to 1 by 3 inches. 


The critical hoop stresses for dynamic fracture arrest for various tear strap spacings 
were calculated using the same method as for the L0 2 tank, and the resulting curve o 
crack arrest effectiveness of the 1 by 3 inch graphite/epoxy straps is shown in Figure 
6-4 A plot of strap weight versus spacing is also shown. It can be seen by compar- 
ing the upper curve of Figure 6-1 for the L0 2 tank with the equivalent curve of Figure 
6-4 that tiie effectiveness of the graphite /epoxy tear straps was not significantly en ,, 
hanced by a doubling of the cross-sectional area of tiie straps. It can also be seen ~ 
from the strap weight curve that the straps are extremely heavy; at the strap spacing 
required for the limit stress of 40.6 ksi, the weight penalty wuld be over 20,000 

pounds. 
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Figure 6-4. LH 2 Tank Crack Arrest Effectiveness of Graphite /Epoxy Tear Straps 

6.2.2 FAIL-SAFE ANALYSIS — LH 9 TANK SKIN UNDER LONGITUDINAL LOADS. 
Taking a transverse section through the integrally stiffened tank skin in the region of 
the bottom centerline at Station 2600, the following configuration is obtained. 


t = 0. 122 



Using the method given in Reference 20: 


Percent stiffening - 


100 


1 + 


sk 
^str 
100 


1 + 


0.488 

0.264 


= 35.1% 


Values ol the stress intensity factor, K, are computed by use of the formula 


K = C ct 


where 


C = stress intensity correction factor 
(7 = gross stress level 
a = crack half length 

c is from Reference 20. The resulting values of K are plotted versus crack 
and C is from Rete curye , t , s assumed that the stringer Is not completely 

~ r 

fte print at which the stringer is assumed to be completely severed, K is assum 
to increase linearly with the crack length, a, as shown. 

Figure 6-5 shows that once rapid fracture has begun for a transverse > oraok under 
loStudinal loading the stress intensity doesn't go below the critical value, V agam. 
■ZTfo"e Spid fracture begins, it progresses to complete **«•-*»•“* 
tore has l fail-safe capability for transverse cracks under longihtdlnal , 

loads. i| 

6 2 3 LHo TANK UNDER INTERNA L PRE SSURE_^ ^A^TQR L ^F_SAT^'jX^^^ I 

gZ in h» P t« «. c of acal 

initial flaw size, 2a, 

3afety “rr to 'or s ^ £££. what tut. residual strength a flawed 

■•SSS — s 


STRESS INTENSITY FACTOR, K (ksi/ET) 



Figure 6-5. LH 2 Crack Arrestment by Integral 
Stringers for Longitudinal Loading 



Figure 6-6. LHg Tank Critical Initial Crack Length Versus Ultimate 
Factor of Safely for Internal Pressure 
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frames. This solution, however, imposes an inordinate weight penalty and therefore 
fail-safe is practical for internal pressure loading even for increased safety factors. 

6.2.4 t H . tamv UNDER LONGITUDINA L LOADS - FACTOR OF SAFETYPE Rr 
TTIR BATIONS FOR FAIL-SAFE . An initial crack in the transverse direction and 
centrally located between stringers is assumed at Station 2600 bottom centerline. 

The stringers are integral with the skin, and the skin-stringer combination is ma- 
chined from three -inch-thick 2219-T87 aluminum plate. The crack is loaded trans- 
versely due to body bending and axial loads. Analysis for die stress intensity factor 
was performed by the method of Reference 20. The stress intensity factor is com- 
puted by use of the formula 

K = Cct / ira 

where 

K = stress intensity factor 

C = stress intensity correction factor from Figure 9, Reference 20 
a = gross stress level 
a = half crack length 

A gross limit axial stress of 41.1 ksi for the baseline ultimate factor of safety of 
1 4 was used for the calculations. Limit stresses for other ultimate safety factors 
were determined by the same means as for the liquid oxygen tank. The values of K 
for various ultimate factors of safety and crack lengths are plotted in Figure 6-7. 

The curves assume that the stringer is not completely severed until the crack tip n 
the sheet has advanced a distance equal to the height of the stringer past the center- 
line of the stringer. Between the edge of the stringer and the point at whic the 
stringer is assumed to be completely severed, K is assumed to increase linearly 
with the crack length, a. This is represented by the straight sections of the curves. 

Inspection of Figure 6-7 reveals that once rapid flaw growth has begun , there is no 
crack arrest except for a very short distance before the first stringer for FS U -1.6. 
The LH 2 tank therefore has virtually no fail-safe capability for longitudinal oa s 
even at high ultimate factors of safety . 


6.3 WING BOX 

6 . 3 .! WING BOX FAIL-SAFE ANALYSIS. Fail-safe strength of the B-9U wing was 
evaluated analytically with the aid of a finite element computer program. The Weal- 
ized structural model used in the fail-safe analysis is the same as that used in the 
sizing calculations and shown in Figure 3-21. Major tension or tension/shear mem- 
bers of the model were analytically ’’failed," one at a time, and limit design loads 
were applied to the weakened structure. Considerable beef-up was require ma 
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Figure 6-7 . LHg Tank Longitudinal Loading Crack Arrestment by 
Integral Stringers for Various Factors of Safety 

Hie structure adequate for design limit load. Total added weight was 534 pounds or 
2.16% of the total ultimate strength model weight of 24,660 pounds. This corresponds 
to a 932-pound penalty of the actual wing box, which weighs 43,104 pounds. 

The ascent loading condition W-l (maximum a q with headwinds) that produces maximum 
tension in the lower surface was used for the fail-safe analysis. 

Structural members "failed," one at a time, were: 1) spar lower cap between Stations 
207 and 267 of Spares 2,3,4 and 5; 2) the spar sheatr diagonal between Stations 207 
and 267 of Spar 3; 3) the spar lower cap and web between Stations 267 and 327 of Spars 
3 and 4; and 4) the spar lower cap and web of Spar 4 between Stations 447 and 507. In 
the engine area, where spar shear is carried by webs welded to upper and lower caps, 
a lower cap/web failure was treated as a single failure with a weld crack assumed to 
propagate in two directions (i.e. , through the tension cap and through the shear web). 
Note that this type failure appeared only slightly more critical than a simple lower cap 
failure inboard of the engine area. 

Results of the fail-safe analysis are listed in Tables 6-1 and 6-2. Table 6-1 compares 
wing internal load distribution for ultimate load with die load distribution for limit load 
with a major tension member failed. The comparison is confined to that part of the 
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Table 6-1. Wing Box Ultimate and Fail-Safe Internal Loads 


Mp.mher 



Member Loads 





Ultimate 

<ib) 

Failed 

Element^) 

102-112 

(lb) 

Failed 

Element^) 

104-114 

(lb) 

Fail-Safe 
Failed 
Elements^ 
90-102 & 
89-90- 
102-101 
(lb) 

Failed 
Elements^ 
92-104 & 
91-92- 
104-103 

(lb) 

Failed 
Elements 
58-68 
& 57- 
58-68-67 
(lb) 

63-73 

‘ 

-354,199 

-281,238 

-273,932 

-278,766 

-271,280 

-276,710 

73-87 

Spar 2 

-497,417 

-413,813 

-376,286 

-416,028 

-373,735 

-380,104 

87-99 f 

Upper 

-628,314 

-524,138 

-476,391 

-544,319 

-478,988 

-467,626 

99-109 

Cap 

-774,735 

-580,767 

-594,141 

-603,342 

-588,782 

-562,813 

109-119 _ 


-769,428 

-562,900 

-588,978 

-579,983 

-584,184 

-556,712 

64-74 ■) 


344,726 

382,984 

279,594 

405,867 

283,011 

266,205 

74-88 

Spar 2 

473,172 

557,997 

386,942 

599,488 

390,504 

360,845 

88-100 

Lower 

580,829 

734,527 

494,338 

766,134 

481,679 

434,472 

100-110 

Cap 

680,139 

893.780 

564,003 

849,089 

554,615 

501,286 

110-120 , 


746,986 

856,912 

612,343 

765,105 

601 , 494 

544,571 

63-74 

73-88 

Spar 2 

77,987 1 

98,715 

104,763 

130,333 

43,457 

59,082 

112,634 

152,653 

44,223 

61,161 

61,353 

72,975 

87-100 

• Truss 

110,340 

127,462 

63,901 

176,297 

69,903 

78,130 

99-110 

Diag T s 

162,279 

62,027 

125,919 

86,582 

111,255 

108,811 

109-120 , 


50 , 668 

21,085 

40,882 

22,966 

40,799 

36,594 

43-55 


-528,592 

-370,866 

-417,546 

-381,026 

-418,886 

-399,785 

55-65 


-641,513 

-465,418 

-497,600 

-482,734 

-496,145 

-495,060 

65-75 

Spar 3 

-842,087 

-587,695 

-674,859 

-609,472 

-665,296 

-643,451 

75-89 

- Upper 

-1,046,631 

-682,779 

-865,611 

-698,986 

-842,755 

-764,095 

89-101 

Cap 

-1,256,888 

-765,161 

-1,050,835 

-750,035 

-1,026,506 

-887,269 

101-111 

-1,590,023 

-995,483 

-1,275,347 

-944,438 

-1,279,230 

-1,096,750 

111-121 


-1,537,001 

-993,688 

-1,210,439 

-953,750 

-1,215,727 

-1,061,835 

44-56 


488,278 

276,724 

450,650 

280,787 

466,883 

417,658 

56-66 

Spar 3 

683,280 

318,786 

655,159 

316,922 

675,788 

603,218 

66-76 

- Lower 

731,348 

249,463 

713,915 

233,734 

733,795 

637,414 

76-90 

Cap 

817,553 

165,112 

812,416 

122,890 

835,242 

677,512 


(1) Lower spar cap. 

(2) Lower spar cap and web. 
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Table 6-1. Wing Box Ultimate and Fail-Safe Internal Loads, Contd 


Member 

Member Loads ~] 




Ultimate 

0b) 

Failed 

Element 

102-112 

(lb) 

Failed 

Element 

104-114 

<ib) 

Fail-Safe 
Failed 
Elements 
90-102 & 
89-90- 
102-101 
flb) 

Failed 
Elements 
92-104 & 
91-92- 
104-103 
(lb) 


90-102 

Spar 3 

913,936 

63,198 

903,960 

0 

950,683 

725,665 

102-112 

. Lower 

984,374 

0 

994,711 

39,481 

965,102 

761,635 

112-122 

j Cap 


1,179,282 

212,045 

1,087,060 

323,493 

1,004,734 

869,468 

43-56- 

Diag 


173,274 

90,455 

167,025 

89,083 

167,676 

143,874 

55-56-66-65 


3 , 199 ( 1 ) 

1,414( 1 ) 

3,267(1) 

1, 329(1) 

3,24o(l) 

2,866(1) 

65-66-76-75 

Spar 

3 , 471 ( 1 ) 

1,122( 1 ) 

3,8i6(i) 

907 (!) 

3, 772(1) 

2, 108^) 

75-76-90-89 'Web 

3,540^) 

814(D 

4,003< 1 ) 

328< 1 > 

3,953(1) 

2 , 002 ( 1 ) 

89-90-102-101 J 


3,625< 1 ) 

996<!) 

3,769(1) 

o(U 

3,847(U 

2,132(1) 

101-112 

1 Truss 

338,957 

259,118 

224,912 

227,263 

257,611 

214,704 

111-122 

1 Diag 


66,842 

73,865 

35,034 

71,509 

38,038 

45,605 

45-57 



-546,210 

-383,012 

-376,980 

-376,685 

-386,762 

-366,689 

57-67 



-615,093 

-420,090 

-446,691 

-409,497 

-464,523 

-386,686 

67-77 

Spar 4 

-750,268 

-519,456 

-515,431 

-502,112 

-529,526 

-449,000 

77-91 

- Upper 

-904,096 

-642,663 

-562,341 

-623,832 

-557,866 

-578,471 

91-103 

Cap 


-1,083,289 

-789,176 

-593,802 

-790,184 

-587,508 

-723,816 

103-113 



-1,375,423 

-1,003,112 

-812,022 

-1,030,636 

-802,961 

-947,346 

113-123 J 



-1,365,959 

-981,314 

-851,983 

-1,005,879 

-840,493 

-939,664 

46-58 



247,467 

225,522 

6,333 

217,837 

-33,114 

-16,146 

58-68 



399,349 

365,110 

-28,338 

353,887 

-99,125 

0 

68-78 

Spar 4 

687,190 

576,154 

53,305 

569,783 

-45,874 

200,502 

78-92 

Lower 

993,679 

808,765 

85,586 

816,134 

-44,716 

474,391 

92-104 

Cap 


1,318,270 

1.056,206 

84,617 

1,096,882 

0 

752,421 

104-114 



1,457,074 

1,177,657 

0 

1,188,325 

164,581 

889,401 

114-124 



1,487,248 

1,186,034 

159,092 

1,161,699 

450,694 

956,022 


(1) Designated values are shear flows in pounds per inch. 
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Table 6-1, 


Wing Box Ultimate and Fail-Safe Internal Loads, Contd 


Member 

Member Loads 


■HI 







Fall-Safe 









Failed 

Failed 

Failed 







Elements 

Elements 

Elements 





Failed 

Failed 

90-102 & 

92-104 & 

58-68 





Element 

Element 

89-90- 

91-92- 

& 57- 




Ultimate 

102-112 

104-114 

102-101 

104-103 

58-68-67 




(lb) 

(ib) 

(lb) 

(lb) 

(lb) 

(lb) 

45-58 - 

Diag 


87,227 

80,842 

-2,533 

75,425 

-14,733 

4,458 

57-58-68- 

67 


2,327d) 

2,06l(l) 

284(1) 

1,980(1) 

3ld) 

0 

67-68-78- 

77 

Spar 

2, 536(1) 

2,448(1) 

21l(l) 

2,438(1) 

587(1) 

1,972(1) 

77-78-92- 

91 

Web 

2,743(1) 

2,752(1) 

572 (!) 

2.938(1) 

1,032(1) 

2,388(1) 

91-92-104-103 


3,093(1) 

2,906(1) 

134(D 

3,634(1) 

0 

2,562<!) 

103-114 | 

Truss 

232,114 

162,798 

225,701 

176,894 

198,845 

181,784 

113-124 J 

Diag’s 

69,298 

29,374 

80,214 

30,741 

67,574 

50,663 

69-79 



-367,143 

-270,251 

-157,854 

-268,718 

-183,944 

-238,428 

79-93 

Spar 5 

-467,591 

-333,448 

-264,572 

-336,875 

-332,019 

289,319 

93-105 

Upper 

-548,177 

-383,219 

— 401 , 533 

-394,563 

-413,497 

345,348 

105-115 

Cap 


-659,747 

-460,291 

-412,639 

-472,492 

-408,899 

435,002 

115-125 . 



-498, 804 

-336,421 

-244,786 

-346,210 

-259,481 

326,626 

70-80 ] 



287,356 

223,990 

326,206 

218,433 

396,204 

334,084 

80-94 

Spar 5 

320,662 

269,254 

451,116 

260,559 

558 , 924 

301,793 

94-106 

► Lower 

354,609 

314,838 

644,392 

305,804 

735,727 

288,105 

106-116 

Cap 


417,071 

361,265 

877,784 

364,091 

758,517 

307,480 

116-126 , 



570,641 

483,167 

904,873 

489,670 

698,942 

418,741 

69-80 



199,153 

130,920 

212,179 

136,625 

251,173 

118,345 

79-94 

Spar 5 

204,001 

133,985 

255,727 

138,656 

301,802 

125,575 

93-106 

► Truss 

189,357 

126,113 

269.086 

125,014 

212,948 

126,414 

105-116 

Diag's 

255,098 

185,261 

118,626 

179,028 

120,140 

184,415 

115-126 



-120,755 

-93,957 

-152,446 

-95,340 

-120,351 

-84,573 


{1) Designated values are shear flows in pounds per inch. 
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Table 6-1. Wing Box Ultimate and Fail-Safe Internal Loads, Contd 


Member 


Member Loads 


Ultimate 

(lb/ln) 

Failed 

Element 

102-112 

(lb/in) 

Failed 

Element 

104-114 

(lb/in) 

Fail-Safe 
Failed 
Elements 
90-102 & 
89-90- 
102-101 
(lb/in) 

Failed 
Elements 
92-104 & 
91-92- 
104-103 
(lb/in) 

Failed 
Elements 
58-68 
& 57- 
58-68-67 
(lb/in) 

Skins 







73-87-89-75 

1,659 

1,008 

1,518 

817 

1,546 

1,159 

74-88-90-76 

2,029 

2,370 

2,315 

2,416 

2,171 

1,309 

87-99-101-89 

1,481 

978 

1,428 

679 

1,503 

1,001 

88-100-102-90 

2,095 

2,648 

2,567 

1,782 

1,987 

1,303 

99-109-111-101 

1,148 

533 

981 

327 

924 

734 

100-110-112-102 

1,017 

1,248 

494 

836 

1,100 

651 

75-89-91-77 

1,347 

1,457 

559 

1,543 

392 

996 

110-120-122-112 

24 

1,576 

659 

1,371 

368 

55 

89-101-103-91 

' 1,257 

1,318 

456 

1,237 

651 

914 

101-111-113-103 

1,091 

983 

516 

1,093 

460 

758 

102-112-114-104 

1,700 

912 

2,138 

2,165 

294 

953 

65-75-77-67 

1,348 

1,435 

630 

1,539 

460 

1,027 

112-122-124-114 

570 

1,094 

1,451 

989 

965 

239 

77-91-93-79 

1,260 

885 

1,720 

827 

1,570 

839 

78-92-94-80 

2,320 

1,128 

733 

1,258 

751 

2,080 

91-103-105-93 

1,154 

848 

992 

623 

1,438 

701 

92-104-106-94 

2,071 

1,009 

57 

1,017 

1,690 

1,731 

103-113-115-105 

1,897 

1,494 

1,726 

1,529 

1,822 

1,217 

104-114-116-106 

917 

824 

317 

412 

3,174 

977 





. 
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Table 6-1. Wing Box Ultimate and Fail-Safe Internal Loads, Contd 


Member Loads 




Ultimate 

(lb) 

Failed 

Element 

102-112 

(lb) 

Failed 

Element 

104-114 

(lb) 

Fail-Safe 
Failed 
Elements 
90-102 & 
89-90- 
102-101 
(lb) 

Failed 
Elements 
92-104 & 
91-92- 
104-103 
(lb) 

Failed 
Elements 
58-68 
& 57- 
58-68-67 
(lb) 

Skins 

55-65-67-57 

1.393* 1 ' 

(1) 

1, 390 ' 

745 (1) 

1.489^ 

637^ 

1,103^ 

114-124-126-116 

755< 1 > 

675 (1) 

2,027^ 

497 <X) 

1,392^ 

340^ 

43-55-57 

-45 

1,995^ 

1,590^ 1> 

(1) 

1,432' 

1,666 (1) 

i,m a) 

1,485 (1) 

44-56-58 

-46 

2.775* 1 * 

1,499^ 

2,852 (1) 

1,531 (1) 

2,989^ 

2,623 (1) 

67-77-79 

-69 

1,003 (1) 

690* 1 * 

1,731 (1) 

714 (1) 

1,794^ 

904 (1) 

68-78-80 

-70 

2,059^ 

l.ooi* 1 * 

1,068^ 

1,129< 1 > 


2,191 (1) 

57-67-69-59 

1,135 (1 * 

758 (1) 

1,738 (1) 

815 (1) 

1. 908^ X 

1,218^ 

58-68-70-60 

2.149 (1) 

1,141 (1) 

1,433 (1) 

1,257^ 

(1) 

1, 330 v 

2,156 (1) 

59-69 

Spar 5 

-263,923 

-203,747 

-85,067 

-199,860 

-85,133 

-203,680 

60-70 

Caps 

260,917 

186,214 

258,689 

184,229 

300,192 

296,265 

59-70 ~ 

Diag 

181,866 

120,609 

167,789 

125,253 

191,049 

199,963 

47-59 

Spar 5 

-207,683 

-164,768 

-67,596 

-160,649 

-58,932 

-131,085 

48-60 

Caps 

223,745 


150,512 

204,146 

151,286 

j 227,955 

240,001 


Member Loads 


meiiiuci. 


Ultimate 

(lb) 

Failed 
Element (3) 
100-110 
(lb) 

Fail-Safe 
Failed 
Element ( 3 ) 
106-116 
(lb) 

Failed 
Element (4) 
101-112 
(lb) 

99-110 

Truss 

162,279 

Not 

- 

246,200 

103-114 

78-92-94-80 

92-104-106-94 

Diag 

Skin 

232,114 

2,320< 1 ) 

2,07l(U 

Critical 

2,46l(l) 

2,463<D 

259,200 


Notes? 


(1) Designated values are shear flows In pounds per Inch. 

(2) Underlined values are maximum fall safe load of all cases considered. 

(3) Lower spar cap. 

(4) Diagonal. 
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Table 6-2. Margins of Safety for Baseline Structure, and Area 
Increases for Fail-Safe Design, Wing Box Area 



Member 


Spar Caj 

3S 

Spar Diagonals 

Spar Webs 

T Skins 

M.S. 

Added 

Area 

(in 2 ) 

Added 

Weight 

(lb) 

M.S. 

Added 

Area 

(in 2 ) 

Added 

Weight 

(lb) 

M.S. 

Added 

Thick- 

ness 

(inch) 

Added 

Weight 

(lb) 

M.S. 

Added 

Thick- 

ness 

(inch) 

Added 

Weight 

(lb) 

64-74 

74-88 

88-100 

100-110 

110-120 

90-102 

102-112 

48-60 

60-70 

70-80 

80-94 

94-106 

106-116 

116-126 

63-74 

73-88 

87-100 

111-122 

113-124 

59-70 

69-80 

79-94 

93-106 

115-126 

55-56-66-65 

65-66-76-75 

75-76-90-89 

89-90-102-101 

77-78-92-91 

91-92-104-103 

74- 88-90-76 

87- 99-101-89 

88- 100-102-90 
100-110-112-102 

75- 89-91-77 
110-120-122-112 

89- 101-103-91 
102-112-114-104 
65-75-77-67 
112-122-124-114 
55-65-67-57 
44-56-58-46 

57- 67-69-59 

58- 68-70-60 

67- 77-79-69 

68- 78-80-70 

77- 91-93-79 

91- 103-105-93 
104-114-116-106 
114-124-126-116 

78- 92-94-80 

92- 104-106-94 
99-110 
103-114 

-0.15 
-0.21 
-0.24 
-0.24 
-0.13 
-0.04 
-0.01 
-0. 07 
-0.13 
-0.17 
-0.43 
-0.52 
-0.53 
-0.35 

0.51 

1.05 

1.55 

1.78 

0.92 

0.31 

0.30 

0.13 

0.33 

0.90 

1.98 

3.18 

3.83 

2.62 

5.19 

10.67 

15.74 

18.22 

6.40 

3.15 

3.07 

1.30 

3.30 
9.00 

19.80 

31.80 
38.60 
18.29 

-0.31 
-0.35 
-0.37 
-0.07 
-0.14 
-0,04 
-0. 17 
-0.29 
-0.26 
-0.17 

-0.34 

-0.06 

0.29 

0.45 

0.55 

0,04 

0.09 

0.07 

0.35 

0.73 

0.58 

0.21 

0.70 

0.13 

3.86 

6.32 

8.07 

0.53 

1.06 

0.81 

4.09 

8.70 

7.05 

2.22 

10.68 

1.80 

-0.01 

-0.09 

-0.11 

-0.05 

-0.08 

-0.16 

0.001 

0.004 

0.005 

0.003 

0.003 

0.007 

0.68 
2.96 
3.95 
2.50 
1.98 
4. 81 

+0.40 
+1.26 
-t 0. 28 
+1.72 
+1.20 
-0.14 
+1.57 
+0.56 
+1,20 
-0.07 
+1.28 
+0.13 
+0.78 
+0.57 
+0.89 
+0.55 
+0.97 
+1.36 
+0,07 
-0.37 
+0.38 
+0.38 

0 

0 

0 

0 

0 

.003 

0 

0 

0 

.001 

0 

0 

0 

0 

0 

0 

0 

0 

0 

.008 

0 

0 

0 

0 

0 

0 

0 

2.98 

0 

0 

0 

0.76 

0 

0 

0 

0 

0 

0 

0 

0 

0 

6.86 

0 

0 

L weight j 

184. 53 

X 

55.19 

1 

1 

.6.88 


] 

10.60 


— - — j l. | 4. a | 

Total added weight for fail-safe = 2 (184.53 + 55.19 + 16.88 + 10.60) = 534 Ib/booster. 
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wing where the redistribution of limit load due tx> a single member failure results in 
loads higher than those experienced by ultimate load on an intact wing. Table 6-2 lists: 
1) margins of safety due to fail-safe redistribution of limit load on a structure sized for 
ultimate load, 2) required increase of bar area (or plate thickness) for zero margins 
of safety on members under fail-safe limit load redistribution, and 3) weight increases 

associated with the added material. 


Table 6-2 shows a total weight increase of 534 pounds for the requirements toat the wing 
carry limit design load with any reasonable in-service structural failure. e 

pounds, 69% is in spar caps, 21% in spar diagonals, 6% in spar webs, and 4% in skins. 
Ail skins requiring beef-up (three per side) were originally 0.016 gage for ultimate re- 
quirements. This gage is probably unrealistically thin when handling, sonic 
and thermal stress requirements are considered. Maximum gage increase was 0. 
for a total gage of 0.016 + 0.009 = 0.025 inch; therefore, it is doubtful that any skin 
beef-up would be needed for fail-safe primary loading requirements. 


fi 3 2 WING BOX FACTOR OF SAFETY PERTUR B ATIONS FOR FAIL-SA FE . The 
method of fail-safe weight analysis torlhe’wing box is described in the previous section. 
In order to extend that analysis to other factors of safety, the following procedure was 
used. First a new ultimate member load was calculated by use of the formula 


p' = 
ult 


FS (P ..) 
u ult 

1.4 


where? 

P ' = ultimate member load at FS^ 

P = baseline ultimate member load for FS =1.4 
ult 


Then a new weight penalty was calculated using 
WT = ^ p & 

where 

= P fail-safe ” P ult’ P fail-safe > P ult 
3 

p = 0.16 lb /in for annealaed Ti-6A1-4V 

l - length of member 

F = allowable stress 
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Figure 6-8 gives the weight penalty for fail-safe design over design for static strength 
17 ° f Safety " ** P° unds and percent It should be nS 

IL 1 ! bH P l ed are ^ 1560311:168 *** fail-safe design imposes above the weight 
required for static strength design for a given ultimate factor of safety. Weight penal- 

ies are not therefore related directly to the baseline wing box weight. The total wing 
box weight penalty is also broken down into separate curves for the lower spar capsid 
other wing box structure in the same figure. Inspection of Figure 6-8 revel ^ a 
wmg box designed for static strength at an FS U of 1.4 required beef-up ofll 
pounds to give the box full fail-safe capability for 100% of limit load. To obtain a fail- 
safe capability of 100% of limit load simply by raising FS for the whole wing box struc- 
ture, it would be necessary to increase FS u to 2.95 and therefore impose a weight 
penalty of many thousands of pounds. Thus the only efficient way to obtain failsafe 

foT^ t *T ing iS by judiCi ° US 10631 ^ef-up. The baseline wing lx desf^d 

initi S lf lC i Strength Wifl \ FS u " 1>4has a fail-safe capability of 47% limit-load forle 
initial failures assumed in Section 6.3.1. 

6.4 THRUST STRUCTURE 

6.4.1 TO RUST STRUCTURE _F AIL-SAFE ANALYSIS . Fail-safe strength of the thrust 

T analytiC,lly with aid of a finite element compter program 

s“X^fT 7 del T d !° r ** feU ' Safe analj,sls is ft® sam ® as that de- ' 
crtbed n Ftgiu-e 3-17. Tow major tension members of the model were analytically 

faded, one at a time , and limit design loads were applied to ihe weakened structure 

F '™t rS re<Iulr6d some beef - u P because of the redistribution of loads. Total 
added weight was 76 pounds or 0.34% of the total weight of 22,450-pound computer model 
Hus ts equivalent of 85 pounds for the actual 25,067-pound weight of the stru!Le 

^ a f7u CO ” di aT CO " Sldered were: °"® »<»»• ground sidewinds, maximum alpha q 

headwinds, and 3g maximum thrust. ** q 

Two major tension members were "failed," one at a time. The members were truss 
elements from one of the four thrust beams (Figure 3-17) and were selected, first T- 
cause they were tension members, and second, because they carried very large loLte 
m ihe unladed configuration. Engineering judgment indicated that these we JSe criti- 
cal members to be considered in fail-safe analysis. 

Results of the fail-safe analysis are listed in Table 6-3. Note that, although the analv- 

f i T 1 £ r ‘ 360 ' degree mQdel w ‘ft “ single Mod member, the resuTts listed 
refer to the 45-degree model shown in Figure 3-18. The results are, therefore, maxima 

. r . e , ea re sftucture. Table 6-3 shows that one element (eight on the complete struc- 
ture) of the aft thrust bulkhead and four elements of the forward thrust bulkhead have 

F«rirf“ 0t “ ,ety ,f “' 8afe IOadl ”« 18 ™ d «*-■ ft «»<S» findt loading. 
Four elements are truss members; one is a web stiffener. 
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WING BOX FAIL-SAFE WEIGHT PENALTY (pounds) 



Figure 6-8. Wing Box Weight Penalty for Fail-Safe 
Versus Ultimate Factor of Safely 


Margins of safety vary from a low of -4% on the aft bulkhead to a -37% on the forward 
bulkhead. It is doubtful that any rational fail-safe criterion could etimhiate 
of the forward bulkhead with the existing geometric configuration. A slightly different 
geometry might be less critical for fail-safe loading. 

6 4 2 thpits t STRUCTURE FACTOR O F SAFETY PERTURBATIONS FOB FAII^. 
SAFE. Hie method of fail-sale weight analysis for the thrust structure is ^cribed 
^Section 6 4 1. The procedure used to analyze the thrust structure for otoer factors 
of SetTis *; same as that used for the wtng bo X aH previously described in Sect™ 

6 3 2 Figure 6-9 gives the weight penalty for fall-safe design over design tor static 
stoithfo^rtous ultimate factors of safety in both pounds and percent. Once again 
iSTd t noted that penalities are at a particular safety factor and are not directty 
rented to toe baseline torust structure weight. Inspection of Figure 6-9 reveals that 
a thrust structure designed for static strength at an FS of 1, .4 f^p 

of 85 pounds to give the structure full fail-safe capability or ’ 

obtain a fail-safe capability of 100% of limit load simply by raising FS U for toe wh 
thrust structure, it would be necessary to increase FS U to 2.22 and there I" 

weight penalty of several thousand pounds. Thus, the only efficient way to 
mStortoe wtng is by Judicious local beef-up Thebaseltne tonist ~ 
designed for static strength with FS^ 1.4 has a fall-safe capability of 63% 
load for ihe initial failures assumed in Section 6.4.1. 
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Table 6-3. Thrust Structure Fail-Safe Analysis 
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Added Weight for Fail Safe 





Table 6-3. Thrust Structure Fail-Safe Analysis (Cont’d) 
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Added Weight for Fail Safe 



Table 6-3. Thrust Structure Fail-Safe Analysis (Cont’d) 
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Table 6-3. Thrust Structure Fail-Safe Analysis (Cont'd) 



I 


Holddown Fittings Total Weight 
Added Weight for Fail Safe 






































Table 6-3. Thrust Structure Fail-Safe Analysis (Cont’d) 
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1.1 

ULTIMATE FACTOR OF SAFETY, FSy 

Figure 6-9. Thrust Structure Sensitivity of Weight to 
Ultimate Factor of Safely for Fail-Safe 


6.5 VERTICAL TAIL BOX 

6<5> 1 VERTICAL TATL FAIL-SAFE ANALYSIS. At Section ® - ® (Figure 3-24), 
the plate- stringer configuration is as shown below. 



THRUST STRUCTURE FAIL-SAFE WEIGHT PENALTY (percent) 



The material is annealed titanium alloy Ti-6A1-4V, having an ultimate tensile strength 
of 130 ksi. As in previous examples, Kp will be taken as 2 K Ic , or 156 ksi s/inch. 

Using Poe's method (Reference 20) 


Percent stiffening = 


100 

A 



sk 

str 


100 

1 [ 2.00(0.080) 
1.27 (0.157) 


Stress intensify K 



Values of K are calculated by the substitution in this expression of values of the 
stress intensify correction factor C from Reference 20, and the design limit stress 
level of 34 ksi from Table 4-7. The resulting values of K are plotted versus 
crack length in Figure 6-10, which shows that over the range of crack lengths 
considered (up to eight inches), K for the integrally stiffened panel does not approach 
the critical stress intensify level of 156 ksi /inch. 



Figure 6-10. Vertical Box Stress Intensify Factor Versus Crack Length 
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One conclusion to be drawn is that the vertical tail box possesses a high degree of fail- 
safe capability, even though of monolithic construction. Hie principal reason , is fliat 
the stiffened covers of the box are designed for compression, which results in low ten 

sile stresses. 

6 5 2 VEBIICAL fATT. vtOTOR OF S A ^TY PERTURBATIONS FQR FAI L -SAFE . 
The* method of analysis used is (he same as that used previously for die liquid hydrogen 
tank under longitudinal loads in Section 6.2.4. 

Figure 6-11 presents the applied stress intensity factor, K, versus toe half crack 
length, a, for ultimate factors of safety ranging from 1.1 to 1.6. It will be noted that 
evenfor toe low ultimate factor of safety of 1.1 rapid flaw growth does not commence 
until a total flaw length, 2a, of 7.6 inches is reached. Even so, fractore arrest will 
occur somewhere before the third stringer from toe crack center, and slow flaw gro 
will continue until sometime after toe fracture of toe third stringer. us aw grw 
is slow for cracks exceeding 10 inches in length even for low factors of safety. The 
fore, toe vertical tail has a good degree of fail-safe capability since a crack of con- 
siderably smaller size than 10 inches can easily be detected by visual inspection 

techniques. 



Figure 6-11. Vertical Tail Box Stress Intensity Factor Versus 

Crack Length for Various Ultimate Factors of Safety 
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SECTION 7 

RELIABILITY ANALYSIS 


iff atlC Strength anal y sis compares an applied stress with an allowable 
strength by means of a factor of safety. If the factor of safety multiplied by the ap- 
plied stress does not exceed the allowable strength, then the object under analysis is 
considered to be structurally adequate. In actuality, however, loads and strer^ths 
are probabilistic in nature. The structural reliability analysis, therefore, quanti- 

oaZfl a r yZeS f relationshi P of * e statistical distribution of loads to the statisti- 
cal distribution of strength to determine the survival probability of a loaded part. 

The static strength analysis deals with load and strength magnitudes only, whereas 

whJh f ana ! ySiS deals Wlth the two basic Parameters of both load and strength, 
which are the arithmetic mean, (i.e. , a measure of magnitude) and the standard 

deviation (i. e. , a measure of variation). Reliability is dependent on the degree to 
Quantitatively 11 ^ ^ mean load and the respective variances. 

R = P (Sz L) 

The general relationship between the factor of safety and structural reliability when 
the strength and load distribution curves are superimposed as in Figure 1-3 is dis- 
cussed in Section 1. 2. 3. The detailed derivation of the method for Elating structural 
reliability and factor of safety is presented in Section 7. 1, and the sensitivites of 
structurai reliability to factor of safety perturbations for the B-9U components se- 
lected for study are presented in Section 7.2. 

The structure reliability requirements selected for the baseline vehicle are 0 999 for 
yield and 0. 9999 for ultimate. y lor 

7. 1 METHOD OF ANALYSIS 

In practice, applied loads and material strengths can be considered to be values ran- 
domly token from the respective probability distributions of loads and strengths appro- 
2*. missions and materials. Structural reliability Is defined as the probability 
load’ Url0S a SpecUied m 3Blori ’ the structural strength exceeds the maximum applied 


To determine structural reliability, distributions of loads and component strengths 
must be developed. It is customary to use normal distributions for this type of analy- 
sis. Experience has shown that structural loads have normal distributions to a good 
approximation. In generating tables of material strengths in terms of ultimate or 
yield stresses at some probability, normal distributions of material strengtiis are 
usually assumed. Tables of A and B values of strength for various materials, given 
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in Reference 9, are examples. If the normal is not a good approximation of the true 
distributions, the accuracy of values of structural reliability will be significantly 
affected. Insufficient evidence is available to assure the validity of the normal dis- 
tribution of material strengths, particularly in the region of the lower tail. However, 
the results of structural reliability analysis based on the assumption of normal distri- 
butions are useful for evaluating relative adequacy of reliability and sensitivities. 

A factor of safety is applied in structural design to ensure that structural strength will 
exceed applied loads. Regardless of how large this factor is made, there is always 
an overlap of distribution of loads and strengths; that is, there is some slight proba- 
bility of failure. That probability depends on the difference between the means, or 
other predetermined distribution points, of the distributions of loads and strengths 
and their respective scatters, as usually measured by their variances. 

Where L and S are variables in their respective normal distributions with l 2 and S 2 
as the respective variances, the difference D = S - L is also a random variable with 
normal distribution. The mean of this distribution is D = S - L and the variance is 
d 2 = s 2 + *2 # This distribution of the differences is a consequence of the reproduc- 
tive property of the normal distribution. Letting L = applied load and S - component 
strength, when their difference D is negative, structural failure occurs. Therefore, 
structural reliability can be expressed: 

R = P(D^O) = P (S ^ L) 

The density function for D is the normal density 

f ( D ) = --=r e 

d/2tr 


The reliability can be found as 


R = P(D20) = — ]= f e 

d/2rr J 0 


- 1/2 




dD 


This expression can be simplified by setting 
D-D D 
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Then 


j- ,<W dz 

R is evaluated by the usual means from a normal probability table, using the computed 
value of z, the number of standard deviations, as the argument. Conversely, 


D S-L 



can be found from the tables for particular values of reliability. In this manner the 
required strength parameter values can be determined. 

Before the expression given for reliability can be used, it is necessary to have a means 
of determining L , , S, and s. L and 42 will be determined from the range of critical 

loads developed for the structural component for a typical mission. This range is 
taken as L ±3 4 , so that the L, 4, and 4^ are readily found. The maximum or design 
load, L + 3 4, is the value to which the critical (ultimate or yield) safety factor, FS, is 
applied to determine the allowable strength. Allowable strength is related to applied 
load as follows: 

S - z p s = FS (L+ 34) 

where Zp is the number of standard deviations, with s corresponding to the given prob- 
ability that the component will withstand the established ultimate or yield stress. Some 
common z p values are: 

Zp = 2. 326 for probability of 0. 99 
= 2. 576 for probability of 0. 995 

If s is known, S can be readily found from the previously stated relationship between 
stress and strength. More commonly, the 0. 99 and 0. 995 probable material strengths 
are given in ksi. For example, many of the tables of stresses for various materials 
in Reference 9 are given for both probabilities at a confidence of 0. 95, Mean material 
strength in ksi and the standard deviation can be found by solving the two simultaneous 
equations: 

x-k i( j = f a , *-k 2 o = f b 
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where x and cr are mean and standard deviation for material strength. F A and F B are 
values of ultimate or yield stress, as applicable, at two different probabilities from 
sources such as columns A and B of Reference 9. If point values are stated for F A 
and F b , K is merely the z- values corresponding to the given probabilities. If F A 
and F b are tolerance limits for a given confidence level. 



where 

2 

z 

- i 1 

a ” 2(n-l) 


z = z- value for given confidence level = 1. 645 for 95% confidence, and n = test 
sample size. Using F A and F B tolerance limits, limiting values for x and a can be 
determined at one end by setting K = z p and at the other by using the expression for 
K with n = 100, the usual minimum test sample size. Values of x and or in ksi can 
be converted to S and s in kips by using the ratio: 

FS(L+34)/F a or FS(L+3 A)/F b 
depending on which probability is used for the allowable strength. 


In summary, structural reliability was found by multiplying the design load by the 
safety factor, finding x and a for the material, converting those parameters to S 
and s, and determining the probability that S - L was non-negative. Conversely, a 
given value of reliability was used to derive the corresponding factor of safety. 
Values of x and cr for the material were computed to determine a ratio 


a s 

x S 


The value of z for the given R was defined to be : 


S-L 



From above , s = r S. 
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Therefore, z 2 (r 2 S 2 + X 2 ) = (S - L) 2 , which is solved for S, using the quadratic 
formula: 


- L+z /r^ L 2 - z 2 X 2 r^ + X 2 

The plus sign is used for the radical because of the constraint S > L. Now s is found, 
so that allowable strength can be determined and the factor of safety established. 

7.2 RELIABILITY ANALYSIS AND SENSITIVITY TO FACTORS OF SAFETY 


7.2. 1 RELIABILITY ANALYSIS OF WING SPAR CAPS . This section presents the 
results of structural reliability analysis of the wing lower spar caps , critical in the 
tension failure mode. Reliability factors, R, are calculated by the method of Section 

7. 1 for the load variability that occurs during ascent and entry load conditions and the 
material strength variability exhibited by several structural materials, including Ren^ 
41 and 7075-T6 aluminum in addition to the baseline Ti-6A1-4V material. 

Load variability on the wing structure is presented schematically in Figure 7-1 and is 
based on engineering experience and judgement only. The distribution of entry condi- 
tion loads was developed considering the combined effects of sensors, control system, 
aerodynamic load distribution, and avionics. The distribution on ascent load distribu- 
tion considered the additional effects of winds, turbulence, and guidance system. As 
can be seen, the entry condition has low load variability while the ascent condition has 
high load variability. 
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Data on material strength variability were obtained from References 7, 8, and 9 and 
are presented in Figures 7-2 and 7-3. The z p value used in the following structural 
reliability analysis is 2. 326. This value is the ninety-ninth percentile corresponding 

to the tabulated A values of F ta and F ty , the design allowable “'“7* 7* fnfte Agues' 
respectively. Since no allowance is made for the sample size used to obtain the A value , 
the value used for Zp provides an upper limit for s, resulting in conservative values for 
reliability as a function of factor of safety. 

A preliminary stress analysis for the wing during ascent and entry provides a coeffi- 
cient of variability of stress, C VL , of 0. 0462 for ascent and 0. 0165 for ^ C VL 
is the ratio of standard deviation to the mean of the distribution of possible stresses 
applied during the mission, computed for the time at which the stress is maximum. 

The design limit stress is established from the design allowable stress and safety 
factor and is the mean stress plus three standard deviations, assuming a normal dis- 
tribution of stresses. 

A comparison is shown in Figures 7-4 and 7-5 between the reliability of wing spar caps 
made from aluminum 7075-T6 and annealed Ti-6A1-4V over the indicated r g 
factor of safety. These values of reliability are based on the maximum stress condi- 
tions during ascent at or near room temperature. Ascent is the critical ° r 
these members. The data for the aluminum alloy is computed from Iteferenc , 
using a hole-out factor of 1. 05, while that for the titanium alloy is similarly compute 
from Reference 8. C vS is the coefficient of variability of strength similar to C yL 

for stress. 

If a reliability of 0. 999 is considered adequate for yield, a yield factor of safety of 0. 97 
would be adequate for both materials. The design limit stress is then 


and 


62. 9/0. 97 = 64. 8 ksi for 7075-T6 aluminum 
120/0. 97 = 123. 7 ksi for Ti-6A1-4V annealed 


References 7 and 8 give values of F ta and correspond!^ C VS fo r 7°1 ' 5 ‘ ” " 

4V, respectively, to which the hole-out factor was apphed. F* for ™ thi* 

lcsl withCvuof 0.04, and for T1-6A1-4V is 127.6, with Cys of 0.0216. Thus, the 

factors of safety corresponding to a yield reliability of 0. 999 are 


and 


73. 3/64. 8 = 1. 13 for 7075- T6 aluminum 
127. 6/123. 7 = 1. 03 for Ti-6A1-4V annealed 


These factors of safety result In ultimate structural reliability of 0. 999999995 for the 
aluminum and 0. 9999954 for the titanium. 
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Figure 7-2. Percent of Room Temperature Tensile Strength and Coefficient of 
Variation Strength Versus Temperature for Ti-6A1-4V Annealed 



TEMPERATURE (°F) 

Figure 7-3. Percent of Room Temperature Tensile Strength and Coefficient 
of Variation Strength Versus Temperature for Ren^ 41 
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STRUCTURAL RELIABILITY FOR ULTIMATE STRENGTH 



Figure 7-5. Wing Ultimate Strength Reliability Versus 
Factor of Safety at Room Temperature 
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For wing elements subjected to high temperatures, entry phase is critical because of 
aerodynamic heating and resultant loss of tensile strength Reference 9 gives curves 
showing the reduction In F and F^ due to temperature, for various materials In 
Reference 7 Is a similar curve for 7075-T6 aluminum, along with a curve showtag the 
Increase In C vs with temperature. It does not appear that this material would be a 
good candidate assuming heating during reentry to 650° F. T1-6A1-4V and Renj 1 
appear to be more suitable. Since curves of C vs versus temperature are not readily 
available, they were constructed, assuming the same variatton of C vs with allowable 
tensile strength as for the aluminum. The curves show C vs for Ti-6A1-4V, yie 
and ultimate in Figure 7-2 and C vs for Rend 41, yield and ultimate, in Figure! r-3. 
The coefficient of variation for Rem* 41 does not vary appreciably over the 
shown, if the assumption of behavior similar to that of aluminum is valid. The values 
2Z were obtained from Reference 8. The F ta and for Rend 41 were computed 
from tiie Reference 9 A values. Figures 7-6 and 7-7 are plots of reliability versa 
factor of safety for titanium and Rend 41. Again, the greater variability of Rend 41 
is reflected in the shallower curve. 

If the yield criterion is again a reliability in excess of 0. 999, Figure 7-6 indicates a 
yield sSty factor of 0. 99 for T1-6A1-4V and 1. 02 for Rend 41. The ultimate factors 
of safety corresponding to a yield reliability of 0. 999 are 


and 


147.3/94. 9 = 1. 55 for Rene 7 41 


93. 8/80. 6 = 1. 16 for Ti-6A1-4V 


These factors of safety produce structural reliability of virtually 1. 0 for both materials 
in ultimate tensile strength. 

As a result of this study, it can be concluded for the wing that the selection of a yield 
factor of safety that fulfills the 0. 999 structural reliability requirement establis es an 
ultimate factor of safety that produces a structural reliability that far exceeds 
0.9999 reliability requirement for ultimate strength. 

, , , tift.iarTTJTY ANALYSIS OF OTHER B-9 U COMPONENTS. Curves of struc- 
Lal reUability versus factor of safety (Figures 7-8 awl 7-9) hI7e been computed and 
drawn for the following components: 


a. Crew module. 

b. Liquid hydrogen tank. 

c. Liquid oxygen tank. 

d. Thrust structure. 

e. Aft orbiter support frame. 

f. Vertical tail. 
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STRUCTURAL RELIABILITY FOR YIELD STRENGTH 



Figure 7-6. Wing Yield Reliability Versus Factor of Safety at 650° F 
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STRUCTURAL RELIABILITY FOR ULTIMATE STRENGTH 



Wing Ultimate Strength Reliability Versus Factor of Safety at 650 F 
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Figure 7-7 



STRUCTURAL RELIABILITY FOR ULTIMATE STRENGTH 



Figure 7-8. Structural Reliability at Ultimate Strength for Several 
B-9U Components Versus Factor of Safety 
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STRUCTURAL RELIABILITY FOR YIELD STRENGTH 



! 

Figure 7-9. Structural Reliability at Yield Strength for Several j 

B-9U Components Versus Factor of Safety 5 
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The computations utilized data giving load variability furnished by analysis of vehicle 
flight dynamics and strength and variability of strength data from Reference 9. This 
data is listed in Table 7-1. 


Table 7-1. Component Materials, Strength Values, and Coefficients of Variation 


Component 

Material 

Temper- 

ature* 

(° F) 

Ultimate Strength 

Yield Strength 

Ftu** 

(ksi) 

C VS 

C VL 

Fty** 

(ksi) 

c vs 

C VL 

LH g Tank 

2219-T87 

RT 

61 

0. 0158 

0. 0200 

49 

0. 0195 

0. 0200 

LC >2 Tank 

2219-T87 

-297 

73 

0. 0158 

0. 0125 

57 

0.0195 

0. 0125 

Crew Module 

2219-T87 

RT 

61 

0. 0158 

0. 0240 

49 

0. 0195 

0. 0240 

Aft Orbiter 

2219-T87 

■ RT 

61 

0.0158 


49 

0.0195 


Support Frame 









Thrust 

Ti-6A1-4V 

RT 

130 

0. 0216 

0.0143 

120 

0. 0298 

0. 0143 

Structure 









Vertical Tail 

Ti-6A1-4V 

RT 

130 

0. 0216 


120 

0. 0298 



* RT indicates room temperature. 

** Mechanical properties listed as "A" basis. 


For each of the listed components, a pair of curves is shown. One curve for each 
component is plotted for yield tensile strength, the other for ultimate. For yield 
strength, reliability signifies the probability of no gross yielding, while for ultimate 
it means the probability of no static failure. It is assumed that all critical flight 
stresses are tensile. 


The curves for items a through d are based on calculations as described in Sections 
7. 1 and 7. 2. 1. In these cases the value of the critical stress during the mission 
varies about a non-zero mean value. Also, it is seen that, with assumed component 
reliability requirements of 0. 999 and 0. 9999 for yield and ultimate, respectively, the 
yield requirement is critical. However, items e and f represent cases in which the 
critical stress can be applied in either direction on a symmetrically designed struc- 
ture. The distribution of stresses is assumed to be symmetrical about zero. In other 
words, mean wind and mean dynamic loading are assumed to be along the vehicle's 
longitudinal axis. At a given time in flight, when fiq is maximum, in the cases of 
items e and f, the distribution of stresses is approximately normal, with mean of 
zero and a large value of standard deviation. The design stress, on which factor of 
safety is based, is established at the 3a (three times standard deviation) value. 

However, the distribution described has a maximum likelihood value of stress equal 
to zero, which is really not the critical value. At various times during the flight, the 
applied tensile stress in one or both directions is bound to be non-zero. These stresses 
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are obviously more critical than zero. It is reasonable to assume that the most critical 
of these stresses will occur at a time near that at which 0 q is maximum. o e er 
mine structural reliability under these loading conditions, the distribution of these 
critical stresses in each direction must be established. With the assumption of load 
symmetry about zero load, the two distributions will have equal moments, and their 
means will be located equally distant from and on either side of zero. 

These distributions could be determined from a fairly exact flight simulation of the 
Space Shuttle mission. This sort of analysis is beyond the scope of the present study. 
However, by assuming finite duration stress maxima that are critical stresses that 
occur in each direction during the maximum 0q period, noise theory can be applied 
to establish the required distribution. Since stress fluctuates in a completely random 
manner, it has the property of noise. If the root-mean-square (rms) value of the 
noise amplitude were constant over a given frequency spectrum and constant as a func- 
tion of time, the noise maxima would be normally distributed. The mean wou 
approximately 0. 91 of the rms value and standard deviation about 0. 82 rms (Re erence 
27, Figure 2, p. 80). All of these assumptions are inexact representations of reality. 
Therefore, the distribution described can only approximate the true situation, but this 
distribution is the best obtainable within the scope of the present study. 


The rms value of noise is, by definition, the standard deviation of instantaneous am 
plitude. The 3a (equal to three times rms) point of the overall stress distribution 
was used as the reference for factor of safety. However, the 3a point of noise max- 
ima, assumed to be critical stresses, is 1. 122 times the value of the factor of safety 
reference. Also, the variance of critical stresses is much greater than for items a 
through d. Finally, in the case of symmetrical stress distributions due to si e oa 
ing of a symmetrically designed structure, the structure has to withstand critical 
stresses in both directions. Two sets of supports or two tail skins, each having i s 
own random value of tensile strength drawn from common distributions , must each 
withstand critical stress for mission success. Therefore, the reliability cacu e 
for one support or skin must be squared to obtain component structural relia i i y, 
assuming independence of strengths of the two supports or skins. 

The consequences of these considerations are a reduced rate of change of reliability 
with respect to factor of safety and required higher factor of safety to achieve an 
acceptable level of reliability. As a result, ultimate strength reliability becomes 
more critical than yield as a design parameter under the previously stated assume 
component requirements of 0. 999 for yield and 0. 9999 for ultimate. 
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SECTION 8 

SYSTEM SAFETY ANALYSIS 

The fundamental goal of system safety engineering is the elimination or lessening of 
all hazards as a result of equipment operation. System safely engineering involves 
a systematic application of analytical techniques, scientific data and derived criteria, 
evaluation methods, experience retention devices, and management ability. Because 
it emphasizes prevention rather than correction of problems, particular emphasis is 
placed on early engineering design and procedural analysis. It is conceivable to take 
into consideration all aspects of the planning, design, development, fabrication, test, 
installation, maintenance, operation, and system evaluation of complex man-machine 
systems. System safety analysis methods that can be used to ensure the attainment 
of the appropriate design safety levels are the design review, the catastrophic failure 
analysis, and the design hazard analysis. 

8.1 RELIABILITY AND CREW SAFETY 


In most cases the safety of the vehicles and crews is consistent with structural reli- 
ability. Certainly any catastrophic structural failure after launch causing premature 
termination of mission is likely to result also in loss of vehicle and crew. Therefore, 
any measure taken to increase reliability will also increase crew safety. Conversely, 
crew safety as influenced by the structure has little effect on probability of mission 
success. Except for the very early mission phases for the orbiter, noncatastrophic 
structural failures do not require abort to increase crew safely. Only leak failures 
in orbiter components such as in propellant tanks or crew or passenger cabin would 
require immediate mission termination that could be chargeable as a mission failure. 

As previously stated, any catastrophic structural failure at any time during the 
mission after launch would probably cause loss of vehicle and crew. The degree of 
hazard of any lesser structural failure in the booster would depend on the failure mode, 
to be discussed later, and the remaining mission time. No abort procedure for the 
baseline booster has been found that would reduce the hazard of structural failure, 
except for landing at the closest possible site. Meantime, the measures available to 
the crew to control the effects of the failure are limited, so that the effects would tend 
to be cumulative with time. The same is true of the orbiter, even though it has abort 
capability. After the failure and initiation of abort, the orbiter flight is at least as 
complex as that of the booster, if not more so. 

8.2 SAFETY OF COMPONENTS 

The following is a list of generalized failure modes of structural components, with 
their causes. 
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Mode 


Cause 


Deformation 

Tensile (compressive, shear) 
failure 

Fatigue 

Brittle fracture 
Leak 


Stress exceeds yield strength 
(inadequate factor of safety) 

Stress exceeds ultimate strength 
(inadequate factor of safety) 

Insufficient fatigue life (design 
deficiencies or stress level too high) 

Insufficient safe-life (inadequate 
proof test or poor choice of material 
and processes) 

Flaw growth through wall 


For components stressed primarily by internal pressure (propellant tanks and crew 
compartment) all the above modes apply. However, flaw growth leading to brittle 
fracture is a more significant factor in pressure component failure than fatigue. . 

Also, in pressure components, most deformation tends to be local in nature, except 
in cases of severe tank overpressure or flight overloads. The local yielding tends to 
relieve local overstresses and is not failure from a safety point of view. The other 
modes do represent either catastrophic events or safety hazards. Failures due to 
both overstress conditions, either local or general, and brittle fractures occurring 
within elastic limits usually lead to total rupture of the pressure component. This 
kind of failure would prove catastrophic to the crew because of the destructuve re- 
lease of engergy, if a sizeable volume of gas is involved, or loss of essential pro- 
pellants or gases. A leak through a crew cabin wall could be fatal to the crew due to 
cabin decompression. A propellant leak is not likely to be immediately catastropic, but 
would pose a potential hazard of fire or explosion. 

Members that primarily bear flight loads, including aerodynamic surfaces, intertank 
adapters, thrust structure, and orbiter -booster attachments, are subject to all the listed 
structural failure modes except leaking. Partial or total deformation or failure of any 
structural member in these components results in a redistribution of loads, resulting 
in increased stress in the remaining members. If this stress redistribution results in 
exceeding u lti mate or elastic limits or in rapidly accelerated crack growth, structural 
failure of the component will ensue. It is readily apparent that such structural failure 
would be catastrophic to the crew of one or both vehicles. 


8.3 CREW SAFETY AND DESIGN CRITERIA 

Design criteria affecting crew safety include factors of safety, proof factors, protec- 
tive and warning devices, and ability of the crew to react to a possible impending 

failure. 


The relationship of crew safety to factor of safety is similar to that between reliability 
and factor of safety . hi general, a higher factor of safety means greater crew safety 
for a particular mission profile and a particular material. When considering different 
materials, different temperatures, or different stress distributions, the distributions 
of possible strengths at each of various temperatures and stresses for each of the dif- 
ferent situations, along with factor of safety, affect probability of failure. Therefore, 
these distributions also affect crew safety in a manner similar to the effects on reli- 
ability (Section 7). A similar but somewhat more complex situation exists for the re- 
lationship of crew safety with proof factor. Involved are the distributions of material 
toughness, initial flaw size, loads inducing flaw growth, and the variability of the pres- 
ence of influencing environments. The factor of safety or proofing factor, as applicable , 
required for a given degree of crew safety depends on the variability in the relevant 
material properties and mission conditions. For reasonable levels of safety the factor 
must be increased if variability is greater. 

With structures there are a few protective devices that can guard against the occurence 
of unusually excessive loads or undetected significant material flaws. One device is 
the provision of extra members to provide structural redundancy. In this way, if a 
member should fail or if the structure should be subjected to excessive load, the re- 
sulting load distribution remains within the strength of the structure. A device applied 
to pressure vessels is a relief valve, to assure that the vessel remains within the 
stress limits established. For greater safety these valves should be redundant, with 
isolation provided in the event that one of the relief valves should fail open. Another 
device that might be considered is a self-sealing liner inside a tank. This liner might 
be used to prevent accumulation of an explosive mixture or to hold pressure. This 
device has several disadvantages. A potential safety problem is the possibility that 
the liner could conceal a flaw that could grow to critical size with catastrophic results. 

If a leak of a fluid that is potentially flammable or explosive occurs in a confined area, 
the hazard is usually better controlled by a device that dispenses a material displacing 
the fluid through vents to prevent buildup of a explosive mixture. 

Possible structural warning devices include strain gages, break wires, leak detectors, 
and cabin pressure gages. The strain gages or break wires can detect excessive 
strains or failures of individual members when placed at key locations. Leak detectors 
are usually incorporated where there is danger of a leak causing an explosive mixture 
of any sort to be formed. A cabin pressue gage and warning device will be used to moni- 
tor the air-tight integrity of the crew compartment. 

If the crew is aware of the development of a structural hazard, there may be certain 
measures taken by the crew to eliminate or reduce the hazard. For example, a moder- 
ate leak in the cabin bulkhead can be filled with a sealing material. If a leak or fire 
detector indicates a leak from a tank, the crew can use manual backup controls as 
necessary to assure that the proper material dispensing (i.e, foam) and vent devices 
are activated. Excessive strains in members of components bearing flight loads can, 
in most cases, be controlled by maneuvering to reduce the loading on those members. 
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For the crew to perform reliably under these circumstances, training will be required 
for the crew members to know when and how to override automatic controls so as to 
relieve affected members without inducing dangerous control disturbances. 

8.4 DESIGN FOR CREW SAFETY 

Consideration of crew safety requires that the design provides for reduction of prob- 
ability of structural failure and to control the effects of failure where possible. De- 
sign measures for providing increased crew safety include redundancy, leak before 
rupture, allowance for thermal and other environmental effects, provisions for 
inspection, protective and warning devices, and emergency override controls, in addi- 
tion to the selection of safety and proof factors appropriate to the materials and stress 
distributions. These measures should receive full consideration in design trade studies. 

If a tank wall can be made sufficiently thin, considering the tank proof factor, the critical 
flaw size can exceed the tank thickness. In this way, the tank will leak before it rup- 
tures. Leaking is the preferable failure mode, since tank rupture is > certain ^tc .be 
catastrophic for the crew. The drawback to leak-before-rupture is hat the proof test 
does not automatically guarantee freedom from leak failures during tank life. It y 

assures that no flaw has an initial size that would result in growth to critical size, 
proper selection of tank thickness, proof pressure, and nondestructive inspection 
might overcome this difficulty. The selection would provide assurance that critical 
flaw size at proof pressure is not greater than the initial flaw size necessary for wall 
penetration during vehicle life under operational use. If this is not feasible an i is 
necessary to avoid leaks, then wall thickness greater than critical flaw size and great 
proof factors are required for an adequate safe-life. 

Material strength and toughness characteristics are sensitive to elevated temperature. 
Therefore, each structural part must be designed for the maximum temperature to 
which it will bo exposed, hi other words, the factor of safety must be based on material 
strength or fracture toughness at maximum operating temperature. Also, fracture 
toughness is greatly influenced by aggressive environments such as salt air an mois- 
ture. Pressure components potentially exposed to such environments must have flaw 
growth rates calculated for those conditions. 

Access to normally hidden structural members should be provide 3d, d 

areas subject to stress corrosion, fatigue, flaw growth, or deformation. Turnaround 
maintenance procedures should provide for inspection of such members, includ g 
nondestructive evaluation (NDE) in critical areas. 


8.5 CREW SAFETY AND WEIGHT 

Effects on vehicle weight of design measures to increase crew safety are listed on the 
opposite page; 
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Measure 


Weight Effect 


Redundancy 

Leak-before-rupture 

or 

Increased proof factor 

Allowance for worst case 
environment 

Inspection provisions 

Protective devices 

Warning devices 

Emergency manual overrides 


Increase 

Increase 

Increase 

Increase 

Negligible 

Negligible to moderate increase 

Negligible 

Negligible 
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SECTION 9 

OPTIMUM FACTORS OF SAFETY IDENTIFICATION 


In the past, factors of safety for aerospace structures have been chosen arbitrarily, 
and have been quite difficult to justify on a rational basis. Usually, justification for 
their use was made on the basis that they led to successful structures. This method, 
however, is risky because of increasingly complex environmental and loading condi- 
tions and more advanced and complex materials. Factors now in use are based upon 
successful use in aircraft and non-reusable spacecraft programs. The reusable space 
shuttle system, however, represents a major advancement in structural technology. 
The system embodies the characteristics of aircraft, spacecraft, and launch vehicles 
with their associated severe environments and loads, long mission life, high reliability 
requirement, and considerations for low cost and weight. Therefore, the arbitrary 
selection of factors of safety, as has been practiced in the past, cannot be used with 
as high a degree of confidence for the Space Shuttle, because of the unknown effects 
of its environments and loads. It therefore becomes highly desirable to have a rational 
method for determination of structural factors of safety for the Space Shuttle structure, 
and, as an extension of this concept, this method or procedure should also be adaptable 
to other types of aerospace vehicles. 

9. 1 METHOD OF FACTOR OF SAFETY SELECTION AND ASSOCIATED WEIGHT 
CHANGE 

The pri mar y objective of the information in the preceding sections of this report is to 
provide the background material necessary to make rational selections of ultimate and 
yield factors of safety for the seven primary B-9U booster structural components 
selected for study. The following items (a through e) present the method for selecting 
the safety factors: 

a. Determine the type of failure modes, design considerations, and design philosophy 
(requirements or criteria) that are deemed to be critical to the vehicle design. 

b. Determine the sensitivity curves of these criteria or requirements to factors of 
safety. 

c. Select numerical values for the design criteria or requirements and establish the 
design philosophy that is to be applied to the particular vehicle or vehicle com- 
ponent. 

d. Determine the required factor of safety for each design criterion or requirement 
from the sensitivity curves determined in step b. 

e. The optimum factor of safety is then the maximum of the factors of safety deter- 
mined for each of the design parameters in Item d. 
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The procedure can be applied to an aerospace structure in any degree of detail desired. 
It may be applied once for the whole vehicle and thus a single FS^ and a single FSy 
would be obtained, or, the procedure may be applied to every structural element of a 
vehicle and an individual pair of FS u 's and FSy's may be obtained for a very large num- 
ber of structural members. The optimum depth of analysis lies somewhere in between, 
and it is a matter of judgement as to the extent to which the procedure should be ap- 
plied. Strong influences in such a decision would be the availability of money, time, 
manpower, and the necessary data to perform the required analyses. 

Once the optimum factors have been determined, the weight change can be determined 
from curves that have been developed to show the sensitivity of structural weight to the 

factor of safety. 

9. 2 SAMP LE FACTOR OF SAFETY SELECTION AND WEIGHT CHANGE DETERMI- 
NATION 

This section presents an example of the application of the method used in determining 
the factor of safely described in Section 9. 1. All of the sample analyses in this section 
refer to Table 9-2, Fail-Safe Design Requirements. 

9.2.1 ESTABLISHMENT OF CRITICAL TYPES OF DESIGN REQUIREMENTS . The 
following design criteria or requirements were deemed critical for the B-9U compo- 
nents selected for this study: 


a. Design philosophy 

b. Service life (missions) 

c. Safe inspection interval (missions) 

d. Safe-life (scatter factor) 

e. Fatigue (scatter factor) 

f. Reliability 

The safe-life scatter factor is one that is applied to the desired vehicle service life 
to obtain the number of missions (in this case, 1 . 5 x 100 = 150 missions) for whic it 
must be shown by fracture mechanics that a structure with an assumed initial flaw 
will not fail. The fatigue scatter factor is one that is applied to the desired service 
life of the vehicle (in this case, 4. 0 x 100 = 400 missions) for which it must be shown 
by fatigue analysis that fatigue cracks will not initiate in an unflawed structure. 

The previously mentioned criteria or requirements are the principal factors consid- 
ered when selecting factors of safety for design purposes. It stands to reason that 
when calculations show excess life capability and excess reliability, the factors o 
safety criteria can be reduced to a more optimum value. Conversely, when large 
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The factors of safety for fatigue are presented in Figure 4-4. FS, = 1 i and FS. = i n 
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are FS u < 1.1 and FS y < 1. 0. Entries are not made in the safe-life column of the table 
since the fail-safe design philosophy has been selected for this component. For re- 
liability , the factors of safety are obtained from Figures 7-8 and 7-9. They show that 
FSu = I- 00 and FSy = 0. 99 are required for 0. 9999 ultimate strength reliability and 

0. 999 yield strength reliability, respectively. For a fail-safe capability of 100% of 
limit load, FS U = 2. 22 is required, as is stated in Section 6. 4. 2. 

9 * 2 ' 3 * ® Wing Box. The sensitivity of wing box fatigue life to factors of safety is pre- 
sented in Figure 4-12. From this figure, the 100-mission service indicates that FSy = 

1. 26 or FSy = 1. 19 are required. It is not necessary to use both of these safety factors 
simultaneously - they both give the same limit operating stress, the use of one of the 
factors is sufficient. Factors of safety are not determined for safe-life for the wing 
box since fail-safe design is employed. Figures 7-4 and 7-5 are used for selection of 
factors of safety required for wing spar cap reliability. From Figure 7-4, FSy = o. 97 
for 0. 999 yield strength reliability and FSy = 1. 00 is required for 0. 9999 ultimate 
strength reliability. For a fail-safe capability of 100% of limit load, FSy = 2. 95 is 
required, as is stated in Section 6. 3. 2. 

9 * 2 * 3 * 7 Vertical Tail Box. Yield design is not a consideration for the vertical tail 
box due to low operating stresses from compression strength design and therefore 
only ultimate factors of safety are given for the vertical tail. The sensitivity of the 
vertical tail fatigue life to FSy is given in Figure 4-14. Since the fatigue life of the 
vertical tail box far exceeds the 100-mission requirement for all FSy investigated, 

FS U < 1. 1 is entered in Table 9-2. FS U for safe-life is found in Figure 5-37 and is 
required to be 1. 02 for the 100-mission life with a 1. 5 scatter factor. For reliability, 
FS U is obtained from Figure 7-8 and is required to 1.30 for 0. 9999 reliability. Sec- 
tion 6. 5. 2 indicates that the vertical fail box has fail-safe capability for FSy < 1. 1. 

9 - 2 ‘ 4 COMPONENT FACTOR OF SAFETY SELECTION . Optimum factors of safety 
for the individual components are selected for the sample analysis of Table 9-2 on the 
basis of Section 9. 2. 3 and the analysis of Sections 3 through 8. These selections 
correspond to the column labeled "FS Apparent or Recommended" in Table 9-2. 

9. 2. 4. 1 Crew Module . The factors of safety selected are FS U = 4. 2 or FSy = 3. 4, 
which are the apparent factors of safety that fulfill the fail-safe requirement. The 
use of either of these FS is sufficient to meet the fail-safe requirement, since either 
one of the FS will, of necessity, restrict the limit operating stress to a level that 
provides the required fail-safe capability. 

9 * 2 * 4 * 2 Liquid Oxygen Tank. For the liquid oxygen tank skin and ellipsoidal end 
domes, which are critical for tension, FSy = 1. 58 or FS - l. 23 are the apparent 
factors of safety that fulfill the safe-life requirement of 100 missions with a scatter 
factor of 1. 5. The use of either of these FS is sufficient to meet the safe-life require- 
ment, since either one of the FS will, of necessity, restrict the limit operating stress 
to a level that provides the required safe-life. 
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The compression critical stringers are not critical for safe-life and therefore the > FS 
for the tension structure are not appropriate. The stringers are designed by the lift- 
off plus ground winds load conditions. Since the thrust loads at liftoff are deterministic 
in nature, FS = 1. 25 is recommended on the thrust portion of the loading. For the 
more variable wind portion of the loading, FSy = 1. 4 is recommended since the air- 
craft type loading conditions (FS U = 1. 5) are not critical for the stringers. F y 
is recommended for yield. 

9 2 4 3 Liquid Hydrogen Tank. For the liquid hydrogen tank skin and end domes which 
are* critical for tension, FS U = 1. 40 or FSy = 1. 14 are the apparent factors of safety 
that fulfill the safe-life requirement of 100 missions with a scatter factor of 1. 5. e 
use of either of these FS is sufficient to meet the safe-life requirement, since either 
one of the FS will, of necessity, restrict the limit operating stress to a level that 
provides the required safe -life. 

The stringers and belt frames are critical for compression loads and therefore the FS 
for the tension structure are not appropriate. Since the 3g maximum thrust loadin & 
condition produces maximum compression in many areas of the tank, FSy - 1. 25 and 
FS = 1. 00 are recommended for use on this condition because Hie loads are due to 
thrust, which is deterministic in nature. For other load conditions, FSy = 1. 4 is 
recommended since the aircraft type loading conditions (FSy = 1. 5) are not critical. 

For yield, FSy = 1. 0 is recommended. 

9 2 4 4 Aft Orbiter Support Frame; For the support frame, structural reliability 
produces the required factors of safety. Yield strength reliability requires FSy = 1. 15. 
The material strengths used for the aluminum frame were F^ - 50 ksi and F^ 40 ksi 
These reduced values were used to account for the effect of strength reducers (i. e. , 
fastener holes, welds, etc. ). The limit stress is then: 


^limit 


40 

= 34.8 ksi 

1. 15 


FSu = 


tu 


50 


f limit 34, 8 


= 1. 43 


Thus, FSy = 1.43 is the ultimate factor of safety that produces the required yield 
strength reliability of 0. 999. Figure 7-8 shows that FS U = 1. 43 gives an ultimate 
strength reliability greater than the required value of 0. 9999. The use o ei er u 
1. 43 or FS y = 1. 15 is therefore sufficient to fulfill the reliability requirement. 

9 2 4 5 Thrust Structure. Table 9-2 indicates that FSy = 2. 22 is required for a fail- 
safe capability of 100% oflimit load. It is inefficient to design the whole structure to 
this FS , however, when other criteria require low FSyS and fail-safe can be obtained 
at these lower FSyS by judicious local beef-up. Since large portions of the thrust 
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structure are designed by thrust loads that have high predictability, FSy = 1. 25 is 
recommended for loads along with local beef-up to obtain fail-safe capability. Since 
design requirements all require an FS y < 1. 0, and the use of such a low factor is not 
considered to be an acceptable design practice, FSy = 1. 0 is selected. 

9. 2. 4. 6 Wing Box. Table 9-2 shows that FS U = 2. 95 is required to provide a fail-safe 
capability of 100% limit load for the wing lower spar caps. Just as for the thrust struc- 
ture, it is inefficient to obtain fail-safe capability by designing large amounts of struc- 
ture to a high factor of safety when other criteria require lower FS u s and fail-safe can 
be obtained at these lower FS u s by judicious local beef-up. Therefore, FS^ = 1. 26 or 
FSy — 1. 19, the factors which fulfill the fatigue requirement, are selected and the spar 
caps are beefed up locally to obtain the fail-safe capability. Use of either one of these 
factors of safety reduces the limit operating stress to a value low enough to meet the 
fatigue requirements. For other wing box structure, the baseline values of FS U = 1. 4 
and FSy = 1. 1 for the launch vehicle type conditions are recommended since the air- 
craft type loading conditions (FS U = 1. 5) are not critical (see Figure 3-23). This 
structure must also be evaluated for fail-safe. 

9- 2. 4. 7 Vertical Tail Box. The structural reliability requirement for 0. 9999 ultimate 
strength reliability controls the selection of the factor of safety. FS U = 1. 30 is neces- 
sary to meet this requirement. Since yield design is not critical for the vertical tail 
box, FSy = 1. 0 is selected. 

9. 2. 5 COMPONENT WEIGHT CHANGE DETERMINATION . This section presents the 
determination of the weight changes which result as a consequence of the new factors 
of safety that were determined for the structural components in Section 9. 2. 4. Again, 
the weights refer to the sample case of Table 9—2. The calculated weights refer in 
particular to the column in that table labeled "AWt. " 

9. 2. 5. 1 Crew Module . The crew module weight does not change from the baseline. 
However, if a change of requirements were to cause a factor of safety change, then the 
new weight would be found in Figure 3-28. 

9 * 2 * 5 * 2 Liquid Oxygen Tank . The weight changes for the liquid oxygen tank are deter- 
mined from Figures 3-2 through 3-5. The weight changes are determined in the follow- 
ing table : 


New Weight Baseline Weight AWeight 


Element 

New FS tl 

(lb) 

(lb) 

(lb) 

Upper Dome 

1. 58 

1812 

1715 

+97 

Skin 

1. 58 

5616 

5616 

0 

Lower Dome 

1. 58 

3180 

2998 

+182 

Stringers 

1. 25 

1275 

1473 

-198 


+81 
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Since proof test pressures design the skin and end domes, it would appear at first that 
no weight changes should occur for the end domes. The reason there is a weight in 
crease for the domes is that the new FS U was determined by analysis of the skin. If 
the domes were designed for their actual proof pressures, as could properly be done, 
there would be no weight increase for the domes. Inspection of Figure 3-4, at first, 
makes it appear that there could be a weight reduction for the skin due to FS U = 1. 58, 
as determined by the proof test requirement. This would be true if a perfect proof 
test could be devised for which the proof pressure was exactly equal to the proof factor 
multiplied by the maximum operating pressure at all points along the tank. In reality, 
a three-stage proof test is the most practical and the minimum weight for the skin is 
5616 pounds for the 100-mission service life with a scatter factor of 1. 5. 


9 . 2. 5. 3 Liquid Hydrogen Tank . The LH 2 tank weight changes are from the analysis 
of Section 3. 2. 2 and are presented in the following table: 


Element 


Upper Dome 

1 . 

Skin 

1 . 

Lower Dome 

1 . 

Stringers 

1 . 

Belt Frames 

1 . 


AWeight 


New FS n (lb) 


40* 0 

40* 0 

40* 0 

25 3g thrust -l 68 

4 other -254 

-422 


* Unchanged from baseline 

The weight of the domes and skin do not change because the factor of safety is deter- 
mined by the baseline requirement for proof test with a proof factor of 1. 13. The 
weight change for the belt frames was determined by the Curve 3 maximum thrust at 
FS,. = i. 25 in Figure 3-10. For FSu = 1. 25, the frame weight is 3999 pounds, or a 
168 pound decrease from the baseline weight of 4167 pounds. The change in stringer 
weight is determined from Figure 3-11, which gives the weight sensitivity of skin and 
stringer to factor of safety. First, the weight change is determined from the 3g maxi 
mum curve at FS = 1. 25 for the combined skin and stringer. This change gives a 
decrease of 782 pounds from the baseline weight of 52,486 pounds to 51, 704 pounds. 
Since the stringers constitute 32. 5% of the skin stringer weight, the weight change for 
the stringers alone is 0. 325 (782) or a decrease of 254 pounds. 

9 2. 5. 4 Aft Orbiter Support Frame . For the support frame, the weight sensitivity 
to factor of safety is given in Figure 3-16. For the new FS U of 1. 43, the figure in i 
cates a weight increase 100 pounds over the baseline weight of 2400 pounds. 


9. 2. 5. 5 Thrust Structure. The weight sensitivity of the thrust structure to factor o 
safety is given in Figure 3-19. For the new FS U of 1. 25, the weight decreases from 
the baseline of 25 , 067 pounds to 23,050 pounds, or a decrease of 2017 pounds. In 
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order to make the structure fail-safe, Figure 6-9 shows that 217 pounds of local beef- 
up is required at FSy = 1. 25; thus, there is a net weight decrease in the thrust struc- 
ture of 1800 pounds. 

9. 2. 5. 6 Wing Box. The factor of safety for the lower spar caps has been reduced to 
FS U = 1. 26. This produces an 11% increase in allowable spar cap stress level. The 
baseline weight of the lower spar caps is 5685 pounds (reference Table 2-4). Thus, 
the weight savings in the spar caps due to decrease in FS u is equal to (0. 11)(5685) or 
625 pounds. From Figure 6-8, the local lower spar cap beef-up, which is necessary 
to make them fail-safe at FS U = 1. 26, is 858 pounds. The same figure shows that the 
beef-up of other structure, which is designed to FS U = 1.4, requires 288 pounds of 
material. The net increase for the wing box, therefore, is 521 pounds. 

9. 2. 5. 7 Vertical Tail Box. The weight sensitivity of the vertical tail box to FS U is 
given in Figure 3-25. For FS U = 1. 3, the weight decreases 420 pounds from the base- 
line value of 8775 pounds to 8355 pounds. 

9. 3 OPTIMUM FACTORS OF SAFETY FOR VARIOUS SETS OF DESIGN REQUIRE- 
MENTS 

In this section, four basic sets of design requirements are analyzed to determine the 
optimum factors of safety and the associated weight changes. These four basic sets 
of requirements are analyzed in Tables 9-1 through 9-4. A sample of the analytical 
procedure used to fill in these tables is presented in Section 9. 2. The required data 
to perform the four analyses are presented in Sections 3 through 8. The baseline set 
of design requirements selected for analysis are presented in the following table. 

These requirements are analyzed in Section 9. 3. 1. 




Baseline Design, Life and Reliability Requirements 


Component 

Design 

Philosophy 

Service 

Life 

(Missions) 

Safe Inspection 
Interval 
(Missions) 

Safe -Life 
Scatter 
Factor 

Fatigue 

Scatter 

Factor 

Reliability 

Factor 

Crew Module 

Fail-Safe 

100 

100 

N/A 

4.0 

0.9999 ULT 
0.999 YLD 

LOg Tank 

Safe -Life 

100 

100 

1.5 

4.0 

0.9999 ULT 
0.999 YLD 

LH 2 Tank 

Safe-Life 

100 

100 

1.5 

4.0 

0.9999 ULT 
0.999 YLD 

Aft Orbiter 
Support Frame 

Safe -Life 

100 

100 

1.5 

4.0 

0.9999 ULT 
0.999 YLD 

Thrust Structure 

Safe -Life 

100 

100 

1.5 

4.0 

0.9999 ULT 
0.999 YLD 

Wing Box 

Safe -Life 

100 

25 

1.5 

4.0 

0.9999 ULT 
0.999 YLD 

Vertical Tail 
Box 

Fail-Safe 

Safe-Life 

100 

100 

1.5 

4.0 

0.999 ULT 
0.999 YLD 
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The three other sets of design requirements that were selected for analysis vary from 
the baseline set in a logical manner and encompass what are thought to be possible de- 
sign alternatives. The variations of these three sets of requirements from file baseline 
set presented in the preceding table are presented in the following table. 


Component 

Requirement Change from Baseline 

Fail-Safe 
Design Approach 

Extended Service Life 
and Inspection Interval, Missions 
Service Life Inspection Interval 

Increased Safe -Life 
Scatter Factor 

Crew Module 

- 

500 

500 

- 

L0 2 Tank 

- 

500 

500 

4.0 Safe -Life Scatter Factor 

LHg Tank 

- 

500 

500 

4.0 Safe -Life Scatter Factor 

Aft Orbiter Support Frame 

- 

500 

500 

4.0 Safe-Life Scatter Factor 

Thrust Structure 

Fail-Safe* 

500 

- 

4.0 Safe -Life Scatter Factor 

Wing Box 

Fail-Safe* 

500 

50 

4.0 Safe-Life Scatter Factor 

Vertical Tail Box 

- 

500 

500 

4.0 Safe -Life Scatter Factor 


♦Inspection for gross failure every flight required; safe -life scatter factor not applicable. 


The "Fail-Safe Design Approach" is analyzed in Section 9.3. 2; the "Extended Service- 
Life and Inspection Interval" is analyzed in Section 9.3.3; and the "Increased Safe-Life 
Scatter Factor" is analyzed in Section 9. 3. 4. 

9. 3. 1 BASELINE DESIGN REQUIR EMENTS ANALYSIS WITH SAFE -LIFE APPROACH . 
The analysis of the baseline”design requirements is presented in Table 9-1, with the 
addition of the requirement of 0. 9999 structural reliability for ultimate strength and 
0. 999 structural reliability for yield strength. The analysis results in structural com- 
ponents with a weight increase of 1044 pounds over their baseline B-9U counterparts. 
This increase is due primarily to the inadequacy of the baseline wing with respect to 
safe-life requirements. Even with 1705 pounds of beef-up in the lower spar caps, an 
inspection for flaw growth is required every 25 flights. To increase the inspection 
interval to a full 100 missions, it would be necessary to decrease the limit to 50% of 
the baseline value (reference Figure 5-27). Since this would impose an unacceptable 
weight penalty, a reduction to 70% of the baseline operating stress level and the corre- 
sponding 25-mission inspection interval was settled upon. 

The remaining six components analyzed in this table are the same as in Table 9-2, 
except for the thrust structure. Therefore, since Table 9-2 was used as the example 
of the analysis procedure in Section 9. 2, the analysis of those five components can be 
found in detail there. The remaining component, the thrust structure, was found to 
require no changes from the baseline. 

9.3. 2 FAIL-SAFE DESI GN REQUIREMENTS ANALYSIS. The analysis of the seven 
selected structural components for fail-safe design requirements is presented in 
Table 9-2. The rationale behind this analysis was to use the fail-safe design philosophy 
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Table 9-1. Optimum Factor of Safety Identification 



Design, Life, and Reliability Requirements 

Type of Loading 


Factors o\ 

Component and 
Elements 

Design 

Philosophy 

Service 

Life 

(Missions) 

Safe 

Inspection 

Interval 

(Missions) 

Safe -Life 
Scatter 
Factor 

Fatigue 

Scatter 

Factor 

Reliability 

Factor 

Load 

Source 

Type of 
Stress 

Material 

FS 

Fatigue 

5 

I. Crew Module — 
Skin, Frames and 
Ellipsoidal Dome 
( Bulkhead) 

Fall-Safe 

100 

100 

NA 

4.0 

0 . 9999 Ult 
0. 999 Yld 

Internal 

Pressure 

Tension 

2219-T87 

Aluminum 

< 1 . 2 Ult 
<1.0 Yld 


II. LC >2 Tank 

a. Skin and Ellipsoidal 
Domes (Bulkheads) 

Safe- Life 

100 

100 

1. 5 

4.0 

0. 9999 Ult 
0. 999 Yld 

Internal 

Pressure 

Tension 

2219-T87 

Aluminum 

< 1 . 1 Ult 
< 1. 0 Yld 

* 

b. Stringers 







Flight 

Compr 




III. LH 2 Tank 

a. Ellipsoidal Domes 
(Bulkheads) and Skin 

Safe -Life 

100 

100 

1. 5 

4.0 

0 . 9999 Ult 
0 . 999 Yld 

Internal 

Pressure 

Tension 

2219-T87 

Aluminum 

< 1 . 1 Ult 
<1.0 Yld 


b. Stringers and 
Belt Frames 







Flight 

Compr 




IV. Aft Orbiter 

Support Frame 
Sta. 2666 

Safe -Life 

100 

100 

1.5 

4.0 

0 . 9999 Ult 
0. 999 Yld 

Flight 

Tension 

2219-T87 

Aluminum 

< 1 . 1 Ult 
<1.0 Yld 

< 

V. Thrust Structure 

Safe -Life 

100 

100 

1.5 

4.0 

0 . 9999 Ult 
0 . 999 Yld 

Flight 

Tension 

T1-6A1-4V 

Annealed 

Titanium 

< 1 . 1 Ult 
<1. 0 Yld 

1 

( 

VI. Wing Box 
a. Lower Spar Caps 

Safe -Life 

100 

25 

1.5 

4.0 

0. 9999 Ult 
0 . 999 Yld 

Flight 

Tension 

Ti-6A1-4V 

Annealed 

Titanium 

1. 26 Ult 
or 

1. 19 Yld 

* 

r 

b. Other Structure 


j 





Flight 

Shear & 
Compr 




VTI. Vertical Tail Box 

Fail-Safe 
Safe -Life 

100 

100 

1.5 

4.0 

0 . 9999 Ult 
0 . 999 Yld 

Flight 

Tension 

Ti-6A1-4V 

Annealed 

Titanium 

< 1.1 Ult 



Notes: 1. FSy = x. xx or FSy = y.yy indicates that the use of either FSy or FSy is sufficient to fulfill the design requirement, but that the use 

2. NA = Not Applicable 

3. Apparent Factor of Safety 

4. Recommended Factor of Safety 








Baseline Design Requirements (Safe-Life Approach) 


: Safety to Meet Requirements 





FS 

iafe-Life 

FS 

Reliability 

FS 

Fail-Safe 

FS 

Apparent or 
Recommended 

FS 

Baseline 

Criteria 

Remarks 

^Weight 

(lb) 

NA 

0. 99 Ult 
0. 98 Yld 

4. 2 Ult 
or 

3.4 Yld 

4.2 Ult 
or 

3.4 Yld 3 

2. 0 Ult 
1. 5 Yld 

Factor of safety determined by fail-safe 
requirement. Proof test, a= 1. 5, required. 

0 

1. 58 Ult 
or 

l. 23 Yld 

1. 00 Ult 
0. 99 Yld 

NA 

1. 58 Ult or 
1. 23 Yld 3 

1. 4 Ult 
1. 1 Yld 

Factor of Safety determined by safe-life 
requirement. Proof test, a = 1. 23, required. 

+279 




1. 25 Ult on 
liftoff thrust 
+ 1. 4 Ult 
on winds 
1. 0 Yld 4 

1. 4 and 
1. 5 Ult 
1. 1 Yld 

Stringers are critical in compression; therefore, safe-life does not 
control FS. Since stringers are designed by liftoff + ground winds, 
the reduced FS U = 1. 25 and FSy = 1. 0 (estimated) are used on the 
thrust loads, which are deterministic in nature. Aircraft-type load 
conditions (FS U = 1. 5 for baseline) are not critical. 

-198 

1. 40 Ult 
or 

1. 13 Yld 

1, 00 Ult 
0. 98 Yld 

NA 

1. 40 Ult or 
1. 13 Yld 3 

1. 4 and 
1. 5 Ult 
1. 1 Yld 

Factor of safety determined by safe-life requirement. 

Proof test, ql = 1. 13 required. Aircraft-type load conditions 
not critical. 

0 




1. 25 Ult on 3g 
max thrust + 

1. 4 Ult on 
other cond 
1. 0 Yld 4 

1. 4 and 
1.5 Ult 
1. 1 Yld 

Stringers are critical in compression; therefore, safe-life does not 
control FS. Since 3g maximum thrust produces maximum compression 
in many areas of the tank, FS^ = 1,25 and FSy = 1.0 (estimated) are used 
on the 3g thrust loads, which are deterministic in nature. Aircraft-type 
load conditions (FS U = 1. 5 for baseline) are not critical. 

-422 

1.1 Ult 
*1.0 Yld 

1. 32 Ult 
1. 15 Yld 

NA 

1. 43 Ult or 
1. 15 Yld 3 

1. 4 Ult 
1. 1 Yld 

Factor of safety determined by reliability requirement for yield. 
FS U = 1. 43 gives 0. 999 yield reliability and an ultimate reliability 
of > 0.9999, 

+ 100 

,.40 Ult 
>r 

l. 29 Yld 

1. 00 Ult 
0. 99 Yld 

NA 

1. 40 Ult or 
1. 29 Yld 3 

1. 4 Ult 
1. 1 Yld 

Factor of safety determined by safe-life requirement. 

0 

\ 05 Ult 

JT 

1. 93 Yld 

1. 00 Ult 
0. 97 Yld 

NA 

2. 05 Ult or 
1. 93 Yld 3 

1. 4 and 

1. suit 

! 1. 1 Yld 

Factor of safety determined by safe-life (inspection interval). 

Aircraft conditions not critical. 

1 

+ 1705 




1.4 Ult 
1. 1 Yld 4 

1. 4 and 
1. 5 Ult 
1. 1 Yld 

Only tension critical structure is flaw growth critical. Therefore, 
use the baseline factors of safety (estimated) due to the high wind 
load variability of the critical max aq condition. 

0 

1. 02 Ult 

1. 30 Ult 

< 1. 1 Ult 

1. 30 Ult ' 
1. 0 Yld 3 

1. 4 and 
1.5 Ult 
1. 1 Yld 

Factor of safety determined by reliability requirement for ultimate. 
Yield design is not critical due to low design ult stresses which remain 
within the elastic range of the material. Aircraft conditions are not 
critical. 

-420 






S(AW) 

+ 1044 


of both Is not necessary. 


9-11 










n r 



Component and 
Elements 


I. Crew Module — 
Skin, Frames and 
Ellipsoidal Dome 
(Bulkhead) 

n. LO 2 Tank 

a. Skin and Ellipsoidal 
Domes (Bulkheads) 

b. Stringers 


m. LH 2 Tank 

a. Ellipsoidal Domes 
(Bulkheads) and Skin 

b. Stringers and 
Belt Frames 


IV. Aft Orbiter 
Support Frame 
Sta. 2666 

V. Thrust Structure 


VI, Wing Box 

a. Lower Spar Caps 

b. Other Structure 


VII. Vertical Tail Box 


Design 

Philosophy 


Fail-Safe 


Safe -Life 


Safe -Life 


Safe -Life 


Fail-Safe 


Fail-Safe 


Fail-Safe 
Safe- Life 


Design, Life, and Reliability Requirements 


Table 9-2. Optimum Factor of Safety Iden 


Service 

Life 

(Missions) 


100 


100 


Safe 
Inspection 
• Interval 
(Missions) 


100 


100 


100 


100 


100 


100 


100 


100 


100 


Note 5 


Note 5 


100 


Safe -Life 
Scatter 
Factor 


NA 


1.5 


1. 5 


1.5 


NA 


NA 


1. 5 


Fatigue 

Scatter 

Factor 


4.0 


4.0 


4.0 


4.0 


4.0 


4.0 


4.0 


Reliability 

Factor 


0. 9999 Ult 
0. 999 Yld 


0. 9999 Ult 
0. 999 Yld 


0. 9999 Ult 
0. 999 Yld 


0. 9999 Ult 
999 Yld 

0. 9999 Ult 
0. 999 Yld 


. 9999 Ult 
999 Yld 


0. 9999 Ult 
0. 999 Yld 


Type of Loading 


Load 

Source 


Internal 

Pressure 


Internal 

Pressure 


Flight 


Internal 

Pressure 


Flight 


Flight 


Flight 


Flight 


Flight 


Flight 


Type of 
Stress 


Tension 


Tension 


Compr 


Tension 


Compr 


Tension 


Tension 


Material 


2219-T87 

Aluminum 


2219-T87 

Aluminum 


Tension 


Shear & 
Compr 

Tension 


2219-T87 

Aluminum 


2219-T87 

Aluminum 

Ti-6A1-4V 

Annealed 

Titanium 


Ti-6A1-4V 

Annealed 

Titanium 


T1-6A1-4V 

Annealed 

Titanium 


Factors of St 


FS 

Fatigue 


<1.2 Ult 
<1.0 Yld 


<1. 1 Ult 
<1.0 Yld 


<1. 1 Ult 
< 1. 0 Yld 


<1. 1 Ult 
<1. 0 Yld 

< 1. 1 Ult 

< 1. 0 Yld 


1. 26 Ult 
or 

1. 19 Yld 


<1, 1 Ult 


Saf- 


N/ 


l.i 

or 

1 .' 


1 . ' 

or 

1. : 


NA 


1 . 0 


NOte8: I IndlCatCS 11101 1116 USC ° f 6ither ^ ° r FSy tS Sufflcient to M(m tte desl g» requirement, but that the use of hot 

3. Apparent Factor of Safety 

4. Recommended Factor of Safety 

5. Inspection for cracks, which could grow to failure, is not required because of fail-safe capability; however, a visual inspection for gro; 
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